README.md

MLflow LightGBM code shadow RCE PoC

This repository demonstrates that an MLflow LightGBM model can place a Python module named lightgbm.py in its model-controlled code/ directory. During mlflow.lightgbm.load_model(), MLflow adds that directory to sys.path and then imports lightgbm, executing the attacker-controlled module during model load.

The PoC writes a local marker file only.