Mlserver โ€” PoC Archivehttps://poc.intelseclab.com/tags/mlserver/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000MLflow / MLServer Insecure Pickle Deserialization RCE โ€” CVE-2026-0596https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0596-mlflow-mlserver-pickle-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0596-mlflow-mlserver-pickle-rce/Critical severity (CVSS 9.6) โ€” web ยท CVE-2026-0596 (GHSA-rvhj-8chj-8v3c). Status: PoC. Affects: MLflow model serving stack (mlflow==2.11.1, mlserver==1.3.5, mlserver-mlflow==1.3.5). Tags: mlflow, mlserver, pickle, insecure-deserialization, rce, machine-learning, cwe-502, docker.webCriticalmlflowmlserverpickleinsecure-deserializationrcemachine-learningcwe-502docker