Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with.

Affected Packages

PyPI mlflow

Affected versions: 2.0.0rc0 (last affected: 2.14.1)

Related CVEs

CVE-2024-37057

Key Information

GHSA ID

GHSA-j8mg-pqc5-x9gj

Published

June 4, 2024 12:31 PM

Last Modified

June 21, 2024 2:37 PM

CVSS Score

7.5 /10

Primary Ecosystem

PyPI

Primary Package

mlflow

GitHub Reviewed

✓ Yes

Dataset

Last updated: September 9, 2025 6:37 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.