ZeroDay Findings
Sign inSign up

Findings

CVE-2026-0596

A command injection vulnerability exists in mlflow/mlflow when serving a model with .

Published Mar 31, 2026 · updated Jul 21, 2026 · lfprojects mlflow

A command injection vulnerability exists in mlflow/mlflow when serving a model with . The is embedded directly into a shell command executed via without proper sanitization. If the contains shell metacharacters, such as or backticks, it allows for command substitution and execution of attacker-controlled commands. This vulnerability affects the latest version of mlflow/mlflow and can lead to privilege escalation if a higher-privileged service serves models from a directory writable by lower-privileged users.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 31, 2026 · NIST NVD

    Detected

    A command injection vulnerability exists in mlflow/mlflow when serving a model with . The is embedded directly into a shell command executed via without proper sanitization. If the contains shell metacharacters, such as or backticks, it allows for command substitution and execution of attacker-controlled commands. This vulnerability affects the latest version of mlflow/mlflow and can lead to privi

  2. Jul 21, 2026 · NIST NVD

    Updated

    A command injection vulnerability exists in mlflow/mlflow when serving a model with . The is embedded directly into a shell command executed via without proper sanitization. If the contains shell metacharacters, such as or backticks, it allows for command substitution and execution of attacker-controlled commands. This vulnerability affects the latest version of mlflow/mlflow and can lead to privi

Affected

  • cpe lfprojects/mlflowversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-0596

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-0596

    A command injection vulnerability exists in mlflow/mlflow when serving a model with . The is embedded directly into a shell command executed via without proper sanitization. If the contains shell metacharacters, such as `$()

    nvd.nist.gov

References