ZenML Server Remote Privilege Escalation VulnerabilityGHSA-vf7j-cmrj-pmmm
MEDIUMGHSA-vf7j-cmrj-pmmm is a medium-severity (CVSS 6.5) CWE-284 vulnerability in zenml. 2 public exploit or proof-of-concept references are indexed, so weaponization risk is real. A fix is available for zenml — see the affected versions and patch details below.
Exploitation Status
Proof-of-concept exploit code exists
- CISA’s SSVC triage found public proof-of-concept exploit code for this CVE, though no confirmed active exploitation.
- A successful exploit gives an attacker total control of the affected component, not partial access.
Exploitation and automatability from CISA’s SSVC triage for GHSA-vf7j-cmrj-pmmm.
EPSS Exploitation Probability
Probability of exploitation in the next 30 days, from FIRST.org EPSS.
How urgent is this, really
Where this sits among everything scored
Real-World Exposure
zenml🐍zenml🐍zenml🐍zenmlReal-time download stats are indexed for npm and PyPI packages. This vulnerability affects PyPI packages — download data is not available via public APIs for these ecosystems.
Description
ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/{user_name_or_id}/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. These are also patched versions: 0.44.4, 0.43.1, and 0.42.2.
Affected Packages
| Ecosystem | Package | Vulnerable range | Fix |
|---|---|---|---|
| 🐍PyPI | zenml | all versions | 0.42.2pip install --upgrade 'zenml==0.42.2' |
| 🐍PyPI | zenml | ≥ 0.43.0&&< 0.43.1 | 0.43.1pip install --upgrade 'zenml==0.43.1' |
| 🐍PyPI | zenml | ≥ 0.45.0&&< 0.46.7 | 0.46.7pip install --upgrade 'zenml==0.46.7' |
| 🐍PyPI | zenml | ≥ 0.44.0&&< 0.44.4 | 0.44.4pip install --upgrade 'zenml==0.44.4' |
Affected Products
zenmlzenmlResearch use only. For defensive security, authorized penetration testing, and academic research only. Never execute exploit code against systems without explicit written authorization.
Detection & mitigation playbook
Open-source dependencyDetect
Scan your dependency tree (package-lock.json, pnpm-lock.yaml, requirements.txt, go.sum, etc.) for zenml, including transitive dependencies — a direct dependency you never call can still pull in a vulnerable version.
Fix
Update zenml to 0.42.2 or later, then make sure no transitive (indirect) dependency still pins the vulnerable range — O3 confirms GHSA-vf7j-cmrj-pmmm is resolved across your whole dependency graph.
Workarounds
Close the privilege gap rather than the entry point: audit which accounts, roles and service identities can reach the affected operation, drop the component to the least privilege it actually needs, and review file and directory permissions created by earlier installs — a default left in place is what makes this reachable.
How to detect GHSA-vf7j-cmrj-pmmm
A community-maintained Nuclei template exists for this CVE. You can scan for it directly:
nuclei -id ghsa-vf7j-cmrj-pmmm -u https://target- Template
- ZenML ZenML Server - Improper Authentication
- Severity
- critical
- Impact
- Successful exploitation could lead to unauthorized access to sensitive data.
- Remediation
- Implement proper authentication mechanisms and ensure access controls are correctly configured.
Template by ProjectDiscovery nuclei-templates (David Botelho Mariano), MIT licensed. View the full template. Scan only systems you are authorised to test.
Frequently Asked Questions
Is GHSA-vf7j-cmrj-pmmm in your dependencies?
Find it across PyPI, including transitive dependencies.