CVE-2026-96775 | MLflow 2.0 dspy flavor model_path deserialization

September 23, 2026 Yanac

A vulnerability has been found in MLflow 2.0 and classified as critical. This impacts an unknown function of the component dspy flavor. The manipulation of the argument model_path leads to deserialization.

This vulnerability is referenced as CVE-2026-96775. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More