CVE-2026-118627 | MLflow load_explainer deserialization

October 29, 2026 Yanac

A vulnerability has been found in MLflow and classified as critical. This vulnerability affects the function load_explainer. Performing a manipulation results in deserialization.

This vulnerability is cataloged as CVE-2026-118627. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More