Vulnerability · Published Aug 7, 2026 · Assigned by VulnCheck

CVE-2026-68772ZenML 0.94.6 Remote Code Execution via CloudpickleMaterializer

High 8.0

In plain English

A high-severity unsafe deserialization in ZenML from ZenML. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 55% of all known vulnerabilities).

Severity (CVSS 3.1)8.0High

Exploit odds (30 days)0.8%top 44.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can replace a stored artifact.pkl file with a crafted cloudpickle payload containing a malicious __reduce__ method, which executes arbitrary system commands when any user or pipeline materializes the artifact through the unsanitized cloudpickle.load() call in cloudpickle_materializer.py.

Affected products (as reported)

Vendor	Product	Versions
ZenML	ZenML	0 – through 0.94.6

Weakness: CWE-502 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References

Pull Request issue-tracking
Product Repository product
Patch Commit patch
https://www.vulncheck.com/advisories/zenml-remote-code-execution-via-cloudpicklematerializer third-party-advisory