CVE-2026-11876 zenml-io CVE debrief

Who should care

Users of zenml-io/zenml version 0.94.2, especially those with multi-tenant ZenML Pro/Cloud deployments, should be aware of this vulnerability. It could potentially enable cross-tenant reconnaissance and further attacks.

Technical summary

The `GET /api/v1/stack-deployment/stack` endpoint in zenml-io/zenml version 0.94.2 lacks proper RBAC authorization checks. This allows any authenticated user to enumerate all deployed stacks across all users and tenants, exposing sensitive information such as infrastructure topology, service connector details, stack ownership, and deployment metadata. The vulnerability is caused by two issues: missing endpoint-level RBAC checks and the use of a server-side `Client()` that bypasses the RBAC enforcement layer by directly accessing the database through `SqlZenStore`.

Defensive priority

Medium priority due to the potential for cross-tenant reconnaissance and further attacks in multi-tenant environments.

Recommended defensive actions

• Apply the patch from the vendor or upgrade to a fixed version of zenml-io/zenml.
• Implement additional monitoring for unusual activity on the `GET /api/v1/stack-deployment/stack` endpoint.
• Review and update access controls for the affected endpoint to ensure proper RBAC enforcement.
• Consider compensating controls such as Web Application Firewalls (WAFs) to detect and prevent exploitation attempts.
• Perform a thorough review of stack deployments to identify potential exposure.
• Verify that all stack owners are aware of the vulnerability and its potential impact.
• Conduct a source code review to ensure that similar vulnerabilities are not present in other endpoints.

Evidence notes

The CVE record was published on 2026-07-21T15:16:30.480Z and was last modified on 2026-07-22T19:16:54.103Z. The NVD entry is currently in the 'Received' status. Limited information is available about the specific affected configurations and potential mitigations.

Official resources