A command injection vulnerability exists in mlflow/mlflow when serving a model with `enable_mlserver=True`. The `model_uri` is embedded directly into a shell command executed via `bash -c` without proper sanitization. If the `model_uri` contains shell metacharacters, such as `$()` or backticks, it allows for command substitution and execution of attacker-controlled commands. This vulnerability affects the latest version of mlflow/mlflow and can lead to privilege escalation if a higher-privileged service serves models from a directory writable by lower-privileged users.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
References
History
Tue, 31 Mar 2026 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 31 Mar 2026 15:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A command injection vulnerability exists in mlflow/mlflow when serving a model with `enable_mlserver=True`. The `model_uri` is embedded directly into a shell command executed via `bash -c` without proper sanitization. If the `model_uri` contains shell metacharacters, such as `$()` or backticks, it allows for command substitution and execution of attacker-controlled commands. This vulnerability affects the latest version of mlflow/mlflow and can lead to privilege escalation if a higher-privileged service serves models from a directory writable by lower-privileged users. | |
| Title | Command Injection in mlflow/mlflow | |
| Weaknesses | CWE-78 | |
| References |
| |
| Metrics |
cvssV3_0
|
MITRE
Status: PUBLISHED
Assigner: @huntr_ai
Published:
Updated: 2026-03-31T17:19:29.907Z
Reserved: 2026-01-05T03:58:44.787Z
Link: CVE-2026-0596
Vulnrichment
Updated: 2026-03-31T17:19:26.568Z
NVD
Status : Received
Published: 2026-03-31T15:16:10.843
Modified: 2026-03-31T15:16:10.843
Link: CVE-2026-0596
Redhat
No data.
OpenCVE Enrichment
No data.