| # MLflow Prophet Code Shadow RCE PoC | |
| This PoC demonstrates code execution during `mlflow.prophet.load_model()` through a model-controlled `code/` directory. | |
| The artifact sets the MLflow `prophet` flavor `code: code` and contains `code/prophet/serialize.py`. MLflow adds `code/` to `sys.path` before loading the model, then `_load_model()` imports `prophet.serialize.model_from_json()`. | |
| Run: | |
| ```bash | |
| python build_and_verify.py | |
| ``` | |