AIKIDO-2026-88334
zenml is vulnerable to Missing Authorization
50
Medium Risk
This Affects:
zenmlTL;DR
Affected versions of this package are vulnerable to Missing Authorization in the GET /api/v1/stack-deployment/stack endpoint (get_deployed_stack). The handler lacked RBAC checks and used a server-side Client() that bypassed the enforcement layer via direct SqlZenStore access, so any authenticated user could enumerate deployed stacks across users and tenants. Exposed data includes stack component details, service connector information, owner user IDs, and deployment metadata, enabling cross-tenant reconnaissance in multi-tenant ZenML deployments.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and run a ZenML server where authenticated users can call the stack deployment API.
Background info
zenml is vulnerable to Missing Authorization in versions 0.61.0 - 0.94.6.
How to fix this
Upgrade the zenml library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant