CVE-2024-37054
MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code on an end user’s system when interacted with.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code on an end user’s system when interacted with.
- Record
CVE-2024-37054- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
EUVDEUVD-2024-2055
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code on an end user’s system when interacted with.
- Record
EUVD-2024-2055- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ghv6-9r9j-wh4j
MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code on an end user’s system when interacted with.
- Record
GHSA-ghv6-9r9j-wh4j- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
NVD
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code on an end user’s system when interacted with.
- Record
CVE-2024-37054- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
OSVGHSA-ghv6-9r9j-wh4j
MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code on an end user’s system when interacted with.
- Record
GHSA-ghv6-9r9j-wh4j- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
OSVPYSEC-2026-1651
MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code on an end user’s system when interacted with.
- Record
PYSEC-2026-1651- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVBIT-mlflow-2024-37054 No score
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code on an end user’s system when interacted with.
- Record
BIT-mlflow-2024-37054- Updated
- 2026-11-02
OSVCLSA-2026-1790247571 No score
TuxCare security update for mlflow (1 CVE)
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post11+tuxcare.
- Record
CLSA-2026-1790247571- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mlflowPyPI |
0.9.0 to 2.14.1 | None known |
mlflowBitnami |
0.9.0 up to 2.14.2 | 2.14.2 |
mlflowTuxCare:PyPI |
2.9.1 up to 2.9.1.post11+tuxcare, plus listed versions 2.9.1.post1+tuxcare2.9.1.post10+tuxcare2.9.1.post2+tuxcare2.9.1.post3+tuxcare2.9.1.post4+tuxcare Show 5 moreShow less2.9.1.post5+tuxcare2.9.1.post6+tuxcare2.9.1.post7+tuxcare2.9.1.post8+tuxcare2.9.1.post9+tuxcare |
2.9.1.post11+tuxcare |
mlflowPyPI |
0.9.0 to 2.14.1, plus listed versions 0.9.0.10.9.11.0.01.1.01.1.1.dev0 Show 45 moreShow less1.10.01.11.01.12.01.12.11.131.13.11.14.01.14.11.15.01.16.01.17.01.18.01.19.01.2.01.20.01.20.11.20.21.21.01.22.01.23.01.23.11.24.01.25.01.25.11.26.01.26.11.27.01.28.01.29.01.3.01.30.01.30.11.4.01.5.01.6.01.7.01.7.11.7.21.8.01.9.01.9.12.0.02.0.0rc02.0.12.1.0 |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | 0o176/CVE-2024-37054_PoC_HTB_SmartHire | 2026-09-26 |
| PoC in GitHub | BardLaudian/CVE-2024-37054 | 2026-09-23 |
| PoC in GitHub | ClearLotus-git/CVE-2024-37054-PoC | 2026-09-19 |
| PoC in GitHub | NiteeshPujari/CVE-2024-37054-MLflow-RCE | 2025-08-22 |
| PoC in GitHub | Spydomain/CVE-2024-37054-MLflow-reverse-shell | 2026-05-18 |
| PoC in GitHub | ben-slates/CVE-2024-37054 | 2026-05-17 |
| PoC in GitHub | jimmexploit/CVE-2024-37054-PoC | 2026-05-18 |
| PoC in GitHub | tristanqtn/CVE-2024-37054 | 2026-05-19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-37054 is a high vulnerability (CVSS 8.8) in Lfprojects Mlflow, published June 4, 2024. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.70%, the 53rd percentile. Fixed in mlflow 2.14.2.
References
Left out here: 35 versions. The JSON record has them.