CVE-2026-68772

Name of the Vulnerable Software and Affected Versions ZenML version 0.94.6

Description The CloudpickleMaterializer component contains a flaw that allows remote code execution. An attacker with write access to a shared artifact store can replace a stored artifact.pkl file with a crafted cloudpickle payload. This payload uses a malicious reduce method to execute arbitrary system commands when a user or pipeline materializes the artifact via the unsanitized cloudpickle.load() call in cloudpickle materializer.py.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.