PT-2026-69078

Name of the Vulnerable Software and Affected Versions ZenML version 0.94.6 Description The CloudpickleMaterializer component contains a flaw that allows remote code execution. An attacker with write access to a shared artifact store can replace a stored artifact.pkl file with a crafted cloudpickl...

CVE-2026-68772: Deserialization of Untrusted Data

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can replace a stored artifact.pkl file with a crafted...