{"id":"CVE-2026-68772","title":"ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file","summary":"ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attack…","severity":"high","cvss":8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-502"],"published":"2026-08-07","updated":"2026-09-16","sourceUpdated":"2026-09-16T20:32:21.400","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-68772","references":[{"url":"https://github.com/zenml-io/zenml","label":"disclosure@vulncheck.com"},{"url":"https://github.com/zenml-io/zenml/commit/bbf8496d049a7e23800bc31b87b10b4fefbebe18","label":"disclosure@vulncheck.com"},{"url":"https://github.com/zenml-io/zenml/pull/5103","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/zenml-remote-code-execution-via-cloudpicklematerializer","label":"disclosure@vulncheck.com"}],"tags":["nvd","cve.org"],"epss":0.00402,"epssPercentile":0.34237,"ingestedAt":"2026-08-09T03:32:40.008Z","vendor":"ZenML","product":"ZenML","affected":["ZenML <= 0.94.6"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-08-08T02:55:56.810726Z"},"slug":"CVE-2026-68772","body":"## Overview\n\nZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can replace a stored artifact.pkl file with a crafted cloudpickle payload containing a malicious __reduce__ method, which executes arbitrary system commands when any user or pipeline materializes the artifact through the unsanitized cloudpickle.load() call in cloudpickle_materializer.py.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":44,"depthScoreParts":{"impact":44,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}