Authentication Bypass Vulnerability in ZenML Product by ZenML IO

CVE-2026-11876

What is CVE-2026-11876?

In ZenML version 0.94.2, a vulnerability in the GET /api/v1/stack-deployment/stack endpoint allows authenticated users to view all deployed stacks, thereby potentially compromising sensitive information such as stack components, service connectors, and user IDs of stack owners. The issue is primarily due to inadequate role-based access control (RBAC) checks and the implementation of a Client() that circumvents RBAC enforcement, permitting direct access to the database via SqlZenStore. This creates significant risks of data leakage and unauthorized access in multi-tenant environments, enabling attackers to conduct reconnaissance and exploit vulnerabilities across different tenants.

References