CVE-2026-68772

HighCVSS 8.0/10Last modified Sep 16, 2026

Description

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can replace a stored artifact.pkl file with a crafted cloudpickle payload containing a malicious __reduce__ method, which executes arbitrary system commands when any user or pipeline materializes the artifact through the unsanitized cloudpickle.load() call in cloudpickle_materializer.py.

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Aug 7, 2026
Last modified
Sep 16, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-687758.8Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-687766.5Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-687776.5Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-687786.5Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-687796.5Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-68785.6A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function math_equal of the file prime_math/grader.py. The maniCVE-2026-687806.5Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-687816.5Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-687829.9Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to CVE-2026-687846.5Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-687854.9Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-687868.8Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.