Threat Intelligence Database

ZenML version 0.94.6 contains a remote code execution vulnerability in its CloudpickleMaterializer component. This flaw allows attackers with write access to a shared artifact store to execute arbitrary code by replacing a stored artifact.pkl file with a malicious cloudpickle payload. The vulnerability arises from the unsanitized use of cloudpickle.load(), which executes the malicious __reduce__ method embedded in the payload during artifact materialization.

A vulnerability in zenml-io/zenml versions 0.57.0 through 0.94.2 allows an attacker to bypass rate-limiting on the `POST /api/v1/login` and self password-change endpoints by rotating the `X-Forwarded-For` header. The rate limiter keys requests by `request.client.host`, which is derived from the `X-Forwarded-For` header when Uvicorn is launched with `--proxy-headers --forwarded-allow-ips *`. This configuration allows clients to control the value of `request.client.host`, effectively bypassing rate-limiting protections. This vulnerability leaves the affected endpoints open to unthrottled credential guessing attacks.

An improper authorization vulnerability exists in the zenml-io/zenml repository, specifically within the API PUT /api/v1/users/id endpoint. This vulnerability allows any authenticated user to modify the information of other users, including changing the `active` status of user accounts to false, effectively deactivating them. This issue affects version 0.55.3 and was fixed in version 0.56.2. The impact of this vulnerability is significant as it allows for the deactivation of admin accounts, potentially disrupting the functionality and security of the application.

MediumVulnerabilityGermanyFranceUnited Kingdom+3#cve#cve-2024-2035#cwe-862

An issue was discovered in zenml-io/zenml versions up to and including 0.55.4. Due to improper authentication mechanisms, an attacker with access to an active user session can change the account password without needing to know the current password. This vulnerability allows for unauthorized account takeover by bypassing the standard password change verification process. The issue was fixed in version 0.56.3.

LowVulnerabilityGermanyFranceUnited Kingdom+4#cve#cve-2024-2213#cwe-620

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/{user_name_or_id}/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. These are also patched versions: 0.44.4, 0.43.1, and 0.42.2.

HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve#cve-2024-25723