Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with.

Affected Packages

PyPI mlflow

Affected versions: 1.1.0 (last affected: 2.14.1)

Related CVEs

CVE-2024-37052

Key Information

GHSA ID

GHSA-76cg-cfhx-373f

Published

June 4, 2024 12:31 PM

Last Modified

June 21, 2024 2:34 PM

CVSS Score

7.5 /10

Primary Ecosystem

PyPI

Primary Package

mlflow

GitHub Reviewed

✓ Yes

Dataset

Last updated: September 10, 2025 6:31 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.