CVE-2025-14287 | MLflow up to 3.6.x os.system container code injection

A vulnerability was found in MLflow up to 3.6.x. It has been rated as critical. This issue affects the function os.system. The manipulation of the argument container leads to code injection.

This vulnerability is listed as CVE-2025-14287. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.