MLflow fixes command injection during local model deployment
MLflow 3.8.1 patched a flaw where an attacker-controlled model artifact could inject shell commands through python_env.yaml when the model was served with the local environment manager.
Why it matters: Model artifacts can be treated as passive files even though deployment tools interpret environment metadata, creating a software-supply-chain path from registry content to host execution.