Remote Code Execution Vulnerability in ZenML by ZenML.io
CVE-2026-68772

8.5HIGH

Key Information:

Vendor

Zenml

Status
Zenml
Vendor
CVE Published:
7 August 2026

What is CVE-2026-68772?

A remote code execution vulnerability exists in the CloudpickleMaterializer component of ZenML 0.94.6. This flaw allows attackers with write access to a shared artifact store to execute arbitrary code by replacing a legitimate artifact.pkl file with a malicious cloudpickle payload. Through this crafted payload, attackers can exploit the unsanitized cloudpickle.load() function in cloudpickle_materializer.py, leading to the execution of unintended system commands whenever the affected artifact is materialized by a user or pipeline.

Affected Version(s)

ZenML 0 <= 0.94.6

References

https://github.com/zenml-io/zenml/pull/5103
issue-tracking
https://github.com/zenml-io/zenml
product
https://github.com/zenml-io/zenml/commit/bbf8496d049a7e23...
patch

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Fiona
.