CyberRota Analysis
AI-GeneratedThe CloudpickleMaterializer component in ZenML 0.94.6 is vulnerable to remote code execution, allowing attackers with write access to a shared artifact store to execute arbitrary code by replacing a stored artifact.pkl file with a malicious payload. This vulnerability can lead to the execution of arbitrary system commands when the compromised artifact is materialized through an unsanitized load function. Organizations utilizing ZenML for data workflows should prioritize addressing this vulnerability to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can replace a stored artifact.pkl file with a crafted cloudpickle payload containing a malicious __reduce__ method, which executes arbitrary system commands when any user or pipeline materializes the artifact through the unsanitized cloudpickle.load() call in cloudpickle_materializer.py.