SmartHire

MLflow Default Credentials

CVE-2024-37054 -- pickle deserialization RCE via malicious PyFunc model

Sudo Privilege Escalation -- Exploited writable MLflow plugins and .pth file execution as root.

SUID Bash -- Created a root-owned SUID Bash binary and obtained root access.