Read the docs
TI-2026-10247 Aliases CVE-2026-11876GHSA-7jmq-cfcx-7mr9

Missing Authorization in get_deployed_stack Endpoint in zenml-io/zenml

Priority MEDIUM 56CWE-862Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-862.

Summary

In zenml-io/zenml version 0.94.2, the `GET /api/v1/stack-deployment/stack` endpoint (`get_deployed_stack`) lacks proper RBAC authorization checks, allowing any authenticated user to enumerate all deployed stacks across all users and tenants. This includes stack component details, service connector information, and user IDs of stack owners. The vulnerability arises from two issues: missing endpoint-level RBAC checks and the use of a server-side `Client()` that bypasses the RBAC enforcement layer by directly accessing the database through `SqlZenStore`. This exposes sensitive information such as infrastructure topology, service connector details, stack ownership, and deployment metadata, potentially enabling cross-tenant reconnaissance and further attacks in multi-tenant ZenML Pro/Cloud deployments.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0023 13th percentileScored 2026-11-07
Fix Fixed zenml-io/zenml (zenml-io): 0.95.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
zenml-iozenml-io/zenmlbefore 0.95.00.95.0Patch availableCNA
  • zenml-io/zenml Vendorzenml-io Affected before 0.95.0 Fixed in 0.95.0 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:zenml:zenml:*:*:*:*:*:*:*:*——zenml-io
  • cpe:2.3:a:zenml:zenml:*:*:*:*:*:*:*:* Versions — — ·zenml-io

Remediation

  • Fix · CNA zenml-io/zenml (zenml-io) Fixed in 0.95.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-11876
  2. 2026-10-03 Alias added: GHSA-7jmq-cfcx-7mr9

References

Other 2

  • TI-2024-16924 ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote… CVSS 3.1HIGH 8.8
  • TI-2024-01939 Directory Traversal in zenml-io/zenml CVSS 3.1CRITICAL 9.9
  • TI-2024-08664 Denial of Service (DoS) via Multipart Boundary in zenml-io/zenml CVSS 3.0HIGH 7.5
  • TI-2024-04355 Insufficient Session Expiration in zenml-io/zenml CVSS 3.1HIGH 8.8
  • TI-2025-07692 Path Traversal in zenml-io/zenml CVSS 3.1HIGH 7.8
  • TI-2026-10285 Rate-limit Bypass in zenml-io/zenml CVSS 3.0MEDIUM 6.5
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences