| # MLflow LightGBM code shadow RCE PoC | |
| This repository demonstrates that an MLflow LightGBM model can place a Python module named `lightgbm.py` in its model-controlled `code/` directory. During `mlflow.lightgbm.load_model()`, MLflow adds that directory to `sys.path` and then imports `lightgbm`, executing the attacker-controlled module during model load. | |
| The PoC writes a local marker file only. | |