ZenML vulnerabilities
We track 4 vulnerabilities in ZenML products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 7, 2026.
Latest ZenML vulnerabilities
- 8.0 High severity
ZenML: Deserialization of Untrusted Data
ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can replace a store
- 7.8 High severity
zenml-io/zenml: Improper Limitation of a Pathname to a Restricted Directory
ZenML version 0.83.1 is affected by a path traversal vulnerability in the `PathMaterializer` class. The `load` function uses `is_path_within_directory` to validate files during `data.tar.gz` extraction, which fails to effectively detect symbolic and hard links
- 7.5 High severity
zenml-io/zenml: Loop with Unreachable Exit Condition
A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to cause excessive resource consumption by sending malformed multipart requests with arbitrary characters appended to the end of multipart boundaries. Thi
- 8.8 High severity
zenml: Improper Control of Generation of Code
zenml v0.55.4 was discovered to contain an arbitrary file upload vulnerability in the load function at /materializers/cloudpickle_materializer.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file.