CVE-2026-68772: ZenML 0.94.6 Remote Code Execution via CloudpickleMaterializer
ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can replace a stored artifact.pkl file with a crafted cloudpickle payload containing a malicious reduce method, which executes arbitrary system commands when any user or pipeline materializes the artifact through the unsanitized cloudpickle.load() call in cloudpicklematerializer.py.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68772?
CVE-2026-68772 has a high severity rating of 8.
What is the impact of CVE-2026-68772?
CVE-2026-68772 allows for remote code execution through malicious pickle files.
How can I mitigate CVE-2026-68772?
To mitigate CVE-2026-68772, restrict write access to shared artifact stores to trusted users only.
What versions are affected by CVE-2026-68772?
CVE-2026-68772 specifically affects ZenML version 0.94.6.
Is there a patch available for CVE-2026-68772?
Yes, a patch for CVE-2026-68772 can be found in subsequent releases of ZenML.