CVE WATCH / VULNERABILITY DETAIL
CVE-2026-118627
HIGHCVSS 7.8NVD feed
Published 4 November 2026 · tracked since 4 November 2026
Description
MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow. User interaction is required to exploit this vulnerability in that the target must visit a malic
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-71901 HIGH 8.1
- CVE-2026-66903 MEDIUM 6.5
- CVE-2026-84728 MEDIUM 5.4
- CVE-2026-82912 HIGH 8.8
- CVE-2026-82916 HIGH 7.1
- CVE-2026-82960 HIGH 8.8
- CVE-2026-83542 CRITICAL 9.8
- CVE-2026-84183 HIGH 8.8
- CVE-2026-82902 MEDIUM 4.3
- CVE-2026-82904 HIGH 7.5