Compound WireTHE STANDUP1 September 2026
MLflow's pickle-off setting doesn't actually block a statsmodels RCE
MLflow's pickle-off setting doesn't actually block a statsmodels RCE
MLflow advisory GHSA-gqvg-gmmx-x4hm: the mlflow.statsmodels flavor omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION guard, so setting it to False does not stop pickle execution on that path. Rated high; it needs a crafted MLmodel artifact in a path MLflow loads. #software