CVE-2025-8406

ZenML version 0.83.1 is affected by a path traversal vulnerability in the `PathMaterializer` class. The `load` function uses `is_path_within_directory` to validate files during `data.tar.gz` extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file writes, potentially resulting in arbitrary command execution if critical files are overwritten.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/zenml-io/zenml/commit/5d22a48d7bf6c7f10b748577c2be79cc7969d398	Patch
https://huntr.com/bounties/a0880d64-9928-45bf-9663-2cd81582d9e7	Exploit Third Party Advisory
https://huntr.com/bounties/a0880d64-9928-45bf-9663-2cd81582d9e7	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:zenml:zenml:*:*:*:*:*:*:*:*

History

19 Oct 2026, 16:10

Type	Values Removed	Values Added
Summary		(es) La versión 0.83.1 de ZenML está afectada por una vulnerabilidad de salto de ruta en la clase PathMaterializer. La función load utiliza is_path_within_directory para validar archivos durante la extracción de data.tar.gz, lo que no logra detectar eficazmente enlaces simbólicos y duros. Esta vulnerabilidad puede conducir a escrituras de archivos arbitrarias, lo que podría resultar en la ejecución de comandos arbitrarios si se sobrescriben archivos críticos.

Information

Published : 2025-10-05 09:15

Updated : 2026-10-19 16:10

NVD link : CVE-2025-8406

Mitre link : CVE-2025-8406

CVE.ORG link : CVE-2025-8406

JSON object : View

Products Affected

zenml

zenml

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2025-8406", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-8406", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-10-06T14:11:45.677463Z"}}], "cvssMetricV30": [{"type": "Secondary", "source": "security@huntr.dev", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.3, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.3}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security@huntr.dev", "affectedData": [{"vendor": "zenml-io", "product": "zenml-io/zenml", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "0.84.2", "versionType": "custom"}]}]}], "published": "2025-10-05T09:15:31.767", "references": [{"url": "https://github.com/zenml-io/zenml/commit/5d22a48d7bf6c7f10b748577c2be79cc7969d398", "tags": ["Patch"], "source": "security@huntr.dev"}, {"url": "https://huntr.com/bounties/a0880d64-9928-45bf-9663-2cd81582d9e7", "tags": ["Exploit", "Third Party Advisory"], "source": "security@huntr.dev"}, {"url": "https://huntr.com/bounties/a0880d64-9928-45bf-9663-2cd81582d9e7", "tags": ["Exploit", "Third Party Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@huntr.dev", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "ZenML version 0.83.1 is affected by a path traversal vulnerability in the `PathMaterializer` class. The `load` function uses `is_path_within_directory` to validate files during `data.tar.gz` extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file writes, potentially resulting in arbitrary command execution if critical files are overwritten."}, {"lang": "es", "value": "La versi\u00f3n 0.83.1 de ZenML est\u00e1 afectada por una vulnerabilidad de salto de ruta en la clase PathMaterializer. La funci\u00f3n load utiliza is_path_within_directory para validar archivos durante la extracci\u00f3n de data.tar.gz, lo que no logra detectar eficazmente enlaces simb\u00f3licos y duros. Esta vulnerabilidad puede conducir a escrituras de archivos arbitrarias, lo que podr\u00eda resultar en la ejecuci\u00f3n de comandos arbitrarios si se sobrescriben archivos cr\u00edticos."}], "lastModified": "2026-10-19T16:10:00.260", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zenml:zenml:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B8F20EE-6A5B-4B25-BCC7-2E818C5BB8F1", "versionEndExcluding": "0.84.2", "versionStartIncluding": "0.83.1"}], "operator": "OR"}]}], "sourceIdentifier": "security@huntr.dev"}