AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-68772

HIGH · CVSS 8 EPSS 0.40% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-07 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

The CloudpickleMaterializer component in ZenML 0.94.6 is vulnerable to remote code execution, allowing attackers with write access to a shared artifact store to execute arbitrary code by replacing a stored artifact.pkl file with a malicious payload. This vulnerability can lead to the execution of arbitrary system commands when the compromised artifact is materialized through an unsanitized load function. Organizations utilizing ZenML for data workflows should prioritize addressing this vulnerability to mitigate potential exploitation risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-68772
Severity
HIGH
CVSS
8
EPSS
0.40%

Original NVD Description

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can replace a stored artifact.pkl file with a crafted cloudpickle payload containing a malicious __reduce__ method, which executes arbitrary system commands when any user or pipeline materializes the artifact through the unsanitized cloudpickle.load() call in cloudpickle_materializer.py.