{"action":"Upgrade mlflow to 2.9.0 or later.","affected":[{"fixed":"2.9.0","introduced":"0"}],"component":"mlflow","cve_ids":["CVE-2024-0520"],"ecosystem":"PyPI","epss":0.02401,"exploited":false,"fixed_versions":["2.9.0"],"ghsa_id":"GHSA-5q6c-ffvg-xcm9","id":"tcs_01M5KGMNS33472F5HF820NEWBX","modified_at":"2026-06-10T17:01:26.015570628Z","published_at":"2024-06-06T19:15:51Z","references":["https://osv.dev/vulnerability/PYSEC-2024-239","https://huntr.com/bounties/93e470d7-b6f0-409b-af63-49d3e2a26dbc","https://github.com/mlflow/mlflow/commit/400c226953b4568f4361bc0a0c223511652c2b9d","https://github.com/advisories/GHSA-5q6c-ffvg-xcm9"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2024-239","url":"https://osv.dev/vulnerability/PYSEC-2024-239"}],"summary":"A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of special elements used in an OS command ('Command Injection') within the `mlflow.data.h"}