README.md

MLflow Prophet Code Shadow RCE PoC

This PoC demonstrates code execution during mlflow.prophet.load_model() through a model-controlled code/ directory.

The artifact sets the MLflow prophet flavor code: code and contains code/prophet/serialize.py. MLflow adds code/ to sys.path before loading the model, then _load_model() imports prophet.serialize.model_from_json().

Run:

python build_and_verify.py