CVE-2024-37059

Summary

CVE-2024-37059 is a deserialization vulnerability affecting versions 0.5.0 and above of the MLflow platform. Maliciously uploaded PyTorch models can exploit this issue and run arbitrary code on an end user's system, potentially leading to security breaches and unintended system modifications. This vulnerability poses a serious risk to users interacting with affected MLflow instances, making it crucial to apply the necessary patches to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.