CVE-2026-116692 - MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules
CVE ID :CVE-2026-116692 Published : Oct. 27, 2026, 9:18 p.m. | 1 hour, 6 minutes ago Description :MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization in...