ZDI 2026-10-29

ZDI-26-845: MLflow Statsmodels _load_model Deserialization of Untrusted Data Remote Code Execution Vulnerability

CVE-2024-37052

Machine-generated analysis · WAYSCloud LLM

MLflow's Statsmodels _load_model function deserializes untrusted data, enabling remote code execution when a user opens a malicious file or visits a crafted page.

Context

The advisory concerns the Statsmodels _load_model function in MLflow. It deserializes untrusted data, allowing remote code execution after user interaction such as visiting a malicious page or opening a malicious file. The vulnerability carries a CVSS score of 7.8 (CVE-2024-37052).

Operator considerations

- Check: Verify MLflow installations that use the Statsmodels _load_model component and confirm they are not processing untrusted model inputs.

From Zero Day Initiative ↗

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-37052.

Read the full advisory on ZDI →