Description
ZenML version 0.83.1 is affected by a path traversal vulnerability in the `PathMaterializer` class. The `load` function uses `is_path_within_directory` to validate files during `data.tar.gz` extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file writes, potentially resulting in arbitrary command execution if critical files are overwritten.
Affected products
zenml: zenml
References3
- github.com/zenml-io/zenml/commit/5d22a48d7bf6c7f10b748577c2be79… Patch
- huntr.com/bounties/a0880d64-9928-45bf-9663-2cd81582d9e7 ExploitThird Party Advisory
- huntr.com/bounties/a0880d64-9928-45bf-9663-2cd81582d9e7 ExploitThird Party Advisory
Metrics
- CVSS 3.1
-
7.8
HIGH
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 0% percentile: 31 · as of 9 November 2026
- CWE
- CWE-22
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.