CVE-2026-96804: MLflow

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control entirely in _load_model(), which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact.

Affected products

• MLflow MLflow: from 2.1, before 3.15.0 (fixed in 3.15.0)

Published 2026-09-23. Last modified 2026-09-24.