CVE-2026-84452

Name of the Vulnerable Software and Affected Versions Windows ML CLI versions prior to 0.4.0

Description The src/winml/modelkit/serve/cli api.py component exposes commands through a localhost HTTP API without authentication and uses a wildcard for the allow origins setting. This allows a malicious website to send cross-origin requests to the '/v1/cli/build' or '/v1/cli/config' endpoints. By setting the trust remote code parameter to true, the system converts it to the --trust-remote-code flag without validation. This triggers the AutoConfig.from pretrained() function with trust remote code=True in src/winml/modelkit/loader/ autoconfig.py, leading to the import of Python code from an attacker-controlled repository and resulting in arbitrary code execution as the server user.

Recommendations Update Windows ML CLI to version 0.4.0.