CVE-2026-0596— MLflow 操作系统命令注入漏洞

Command Injection in mlflow/mlflow

A command injection vulnerability exists in mlflow/mlflow when serving a model with `enable_mlserver=True`. The `model_uri` is embedded directly into a shell command executed via `bash -c` without proper sanitization. If the `model_uri` contains shell metacharacters, such as `$()` or backticks, it allows for command substitution and execution of attacker-controlled commands. This vulnerability affects the latest version of mlflow/mlflow and can lead to privilege escalation if a higher-privileged service serves models from a directory writable by lower-privileged users.

N/A

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

MLflow 操作系统命令注入漏洞

MLflow是MLflow开源的一个简化机器学习开发的平台，包括跟踪实验、将代码打包成可重复的运行以及共享和部署模型。 mlflow存在操作系统命令注入漏洞，该漏洞源于以enable_mlserver=True模式服务模型时，model_uri未经适当清理直接嵌入通过bash -c执行的shell命令，可能导致命令注入和权限提升。

N/A

N/A