{"id":"CVE-2025-8406","aliases":["GHSA-q92x-2x5g-h365","PYSEC-2026-2071"],"title":"ZenML is vulnerable to Path Traversal through its `PathMaterializer` class","summary":"ZenML is vulnerable to Path Traversal through its `PathMaterializer` class","severity":"medium","cvss":6.3,"cvssVector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","vendor":"zenml","product":"zenml","ecosystem":"pip","affected":["zenml >= 0.81.0, < 0.84.2"],"patched":["zenml 0.84.2"],"published":"2025-10-05","updated":"2026-07-07","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-q92x-2x5g-h365","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8406"},{"url":"https://github.com/zenml-io/zenml/commit/5d22a48d7bf6c7f10b748577c2be79cc7969d398"},{"url":"https://github.com/zenml-io/zenml"},{"url":"https://huntr.com/bounties/a0880d64-9928-45bf-9663-2cd81582d9e7"}],"tags":["osv","pip"],"epss":0.00365,"epssPercentile":0.30391,"ingestedAt":"2026-07-08T18:25:52.135Z","slug":"CVE-2025-8406","body":"## Overview\n\nZenML version 0.83.1 is affected by a path traversal vulnerability in the `PathMaterializer` class. The `load` function uses `is_path_within_directory` to validate files during `data.tar.gz` extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file writes, potentially resulting in arbitrary command execution if critical files are overwritten.\n\n## Affected packages\n\n- `zenml >= 0.81.0, < 0.84.2`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `zenml 0.84.2`","depth":"sunlit","depthScore":35,"depthScoreParts":{"impact":34.7,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}