High severityNVD Advisory· Published Sep 8, 2026

CVE-2026-79721

Description

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pypi/Mlflowinferred
Range: >=0.0.1
Package: https://pypi.org/project/mlflow
HiddenLayer/MLflowllm-create
Range: >=0.0.1
Mlflow/Mlflowllm-fuzzy
Range: >=0.0.1

Patches

Vulnerability mechanics

References

www.hiddenlayer.com/sai-security-advisory/2026-09-mlflownvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000