Pickle — PoC Archivehttps://poc.intelseclab.com/tags/pickle/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000MLflow / MLServer Insecure Pickle Deserialization RCE — CVE-2026-0596https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0596-mlflow-mlserver-pickle-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0596-mlflow-mlserver-pickle-rce/Critical severity (CVSS 9.6) — web · CVE-2026-0596 (GHSA-rvhj-8chj-8v3c). Status: PoC. Affects: MLflow model serving stack (mlflow==2.11.1, mlserver==1.3.5, mlserver-mlflow==1.3.5). Tags: mlflow, mlserver, pickle, insecure-deserialization, rce, machine-learning, cwe-502, docker.webCriticalmlflowmlserverpickleinsecure-deserializationrcemachine-learningcwe-502dockerFeast Registry gRPC Unauthenticated RCE via dill.loads — CVE-2026-56121https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-56121-feast-unauth-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-56121-feast-unauth-rce/Critical severity (CVSS 9.8) — misc · CVE-2026-56121. Status: PoC. Affects: Feast (open-source feature store) registry gRPC server. Tags: feast, feature-store, dill, pickle, deserialization, grpc, unauth-rce, mlops.miscCriticalfeastfeature-storedillpickledeserializationgrpcunauth-rcemlops