Executive brief
ZenML is an open-source framework used to manage machine learning workflows and infrastructure. A security flaw in its management interface allows any logged-in user to view technical details about infrastructure setups (stacks) belonging to other users or organizations. This could allow an unauthorized person to map out a company's internal cloud environment, potentially leading to further targeted attacks or data exposure.
Technical details
A missing authorization vulnerability (CWE-862) exists in the `GET /api/v1/stack-deployment/stack` endpoint within ZenML. The `get_deployed_stack` function fails to implement Role-Based Access Control (RBAC) checks and utilizes a server-side `Client()` that interacts directly with `SqlZenStore`, bypassing the standard RBAC enforcement layer. An authenticated attacker can exploit this to enumerate all deployed stacks, exposing sensitive metadata including infrastructure topology, service connector details, and owner user IDs. This is particularly impactful in multi-tenant ZenML Pro or Cloud environments where cross-tenant reconnaissance is possible. The issue is addressed in version 0.95.0.
Affected products
- zenml-io ZenML 0.94.2 and all versions prior to 0.95.0
Timeline
- 2026-07-21: advisory: NVD publication date
- 2026-07-21: disclosed: Vulnerability reported via huntr.dev
- 2026-07-21: patched: Fix committed to GitHub repository