Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.5.0 or newer, enabling a maliciously uploaded Langchain AgentExecutor model to run arbitrary code on an end user’s system when interacted with.

Affected Packages

PyPI mlflow

Affected versions: 2.5.0 (last affected: 2.14.1)

Related CVEs

CVE-2024-37058

Key Information

GHSA ID

GHSA-cwgg-w6mp-w9hg

Published

June 4, 2024 12:31 PM

Last Modified

June 21, 2024 2:36 PM

CVSS Score

7.5 /10

Primary Ecosystem

PyPI

Primary Package

mlflow

GitHub Reviewed

✓ Yes

Dataset

Last updated: September 9, 2025 6:37 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.