CVE-2026-11876

Received Received - Intake

Unauthorized Stack Enumeration in ZenML

Publication date: 2026-07-21

Last updated on: 2026-07-22

Assigner: huntr.dev

Description

In zenml-io/zenml version 0.94.2, the `GET /api/v1/stack-deployment/stack` endpoint (`get_deployed_stack`) lacks proper RBAC authorization checks, allowing any authenticated user to enumerate all deployed stacks across all users and tenants. This includes stack component details, service connector information, and user IDs of stack owners. The vulnerability arises from two issues: missing endpoint-level RBAC checks and the use of a server-side `Client()` that bypasses the RBAC enforcement layer by directly accessing the database through `SqlZenStore`. This exposes sensitive information such as infrastructure topology, service connector details, stack ownership, and deployment metadata, potentially enabling cross-tenant reconnaissance and further attacks in multi-tenant ZenML Pro/Cloud deployments.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-22

Generated

2026-07-22

AI Q&A

2026-07-21

EPSS Evaluated

N/A

NVD

CVE-2026-11876

EUVD

EUVD-2026-46264

Affected Vendors & Products

Vendor	Product	Version / Range
zenml	zenml	0.94.2
zenml-io	zenml	0.94.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

CVE-2026-11876 is an authorization bypass vulnerability in ZenML version 0.94.2. The GET /api/v1/stack-deployment/stack endpoint allows any authenticated user to list all deployed stacks across all users and tenants without proper access controls. This exposes sensitive details like stack components, service connectors, and user IDs due to missing RBAC checks and direct database access bypassing security layers.

Detection Guidance

To detect this vulnerability, check if your ZenML deployment is running version 0.94.2 or earlier. Inspect API logs for unauthorized access attempts to the GET /api/v1/stack-deployment/stack endpoint. Verify if any user can enumerate stacks without proper permissions.

Impact Analysis

An attacker could exploit this to enumerate all deployed stacks in a multi-tenant ZenML environment, revealing infrastructure details, service connector credentials, and stack ownership. This enables reconnaissance for further attacks like lateral movement or privilege escalation in cloud deployments.

Compliance Impact

This vulnerability likely violates GDPR (data protection) and HIPAA (health data privacy) by exposing sensitive infrastructure and user data without authorization. It compromises data confidentiality and access controls required by these regulations.

Mitigation Strategies

Upgrade ZenML to the latest version that includes the security fix. Ensure RBAC checks are enforced at the endpoint level. Review and restrict permissions for the stack deployment endpoint to prevent unauthorized access.

Hi! I’m here to help you understand CVE-2026-11876. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70