TAG

#mlflow

Stories connected through a shared idea, actor, technology or theme.

18 SeptCERT warns MLflow model loaders can bypass pickle controlsCERT/CC reported that MLflow's DSPy flavour applies its pickle guard conditionally based on the file extension, while the statsmodels flavour omits the guard. A malicious model artifact can therefore trigger arbitrary remote code execution through `mlflow.pyfunc.load_model()` even when pickle deserialization is disabled; statsmodels is fixed in version 3.15.0 and DSPy users are advised to avoid the affected flavour until fixed.→