---
id: CVE-2025-8406
aliases:
  - GHSA-q92x-2x5g-h365
  - PYSEC-2026-2071
title: ZenML is vulnerable to Path Traversal through its `PathMaterializer` class
summary: ZenML is vulnerable to Path Traversal through its `PathMaterializer` class
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H'
vendor: zenml
product: zenml
ecosystem: pip
affected:
  - 'zenml >= 0.81.0, < 0.84.2'
patched:
  - zenml 0.84.2
published: '2025-10-05'
updated: '2026-07-07'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-q92x-2x5g-h365'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-8406'
  - url: >-
      https://github.com/zenml-io/zenml/commit/5d22a48d7bf6c7f10b748577c2be79cc7969d398
  - url: 'https://github.com/zenml-io/zenml'
  - url: 'https://huntr.com/bounties/a0880d64-9928-45bf-9663-2cd81582d9e7'
tags:
  - osv
  - pip
epss: 0.00365
epssPercentile: 0.30399
ingestedAt: '2026-07-08T18:25:52.135Z'
---

## Overview

ZenML version 0.83.1 is affected by a path traversal vulnerability in the `PathMaterializer` class. The `load` function uses `is_path_within_directory` to validate files during `data.tar.gz` extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file writes, potentially resulting in arbitrary command execution if critical files are overwritten.

## Affected packages

- `zenml >= 0.81.0, < 0.84.2`

## Remediation

Upgrade to a patched release:

- `zenml 0.84.2`