CVE-2023-6940 (published 2023-12-19T01:41:12.560Z)
with only one user interaction(download a malicious config), attackers can gain full command execution on the victim system.
Affected products: Vendor: mlflow
Product: mlflow/mlflow
Versions: unspecified