Medium 6.3Published Oct 5, 2025

CVE-2025-8406Path Traversal in zenml-io/zenml

Updated under an hour ago (Oct 26, 2026, 11:25 PM ET)

Does this affect you?

It affects zenml-io/zenml and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for zenml-io/zenml

Exploited in the last 30 days

ZenML version 0.83.1 is affected by a path traversal vulnerability in the `PathMaterializer` class. The `load` function uses `is_path_within_directory` to validate files during `data.tar.gz` extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file writes, potentially resulting in arbitrary command execution if critical files are overwritten.

CVSS: 6.3 MEDIUM (v3.0, CNA)CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-22
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: @huntr_ai
NVD analysis: Analyzed
Record last updated: Oct 6, 2025
First seen by InfoSec Signals: Oct 19, 2026

Affected products

Affected products

zenml-io zenml-io/zenml zenml_io:zenml (from the name)	from unspecified before 0.84.2	CNA record
zenml zenml zenml:zenml	from 0.83.1 before 0.84.2	NVD

References

References

https://huntr.com/bounties/a0880d64-9928-45bf-9663-2cd81582d9e7	exploit, third-party-advisory
https://github.com/zenml-io/zenml/commit/5d22a48d7bf6c7f10b748577c2be79cc7969d398	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.