Vendor
ZenML
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.0
ZenML 0.94.6 Remote Code Execution via CloudpickleMaterializer
ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can replace a stor…