PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-11876 zenml-io CVE debrief

CVE-2026-11876 is an information disclosure vulnerability in zenml-io/zenml version 0.94.2. The `GET /api/v1/stack-deployment/stack` endpoint lacks proper Role-Based Access Control (RBAC) authorization checks, allowing any authenticated user to enumerate all deployed stacks across all users and tenants. This includes stack component details, service connector information, and user IDs of stack owners. The vulnerability arises from missing endpoint-level RBAC checks and the use of a server-side `Client()` that bypasses the RBAC enforcement layer by directly accessing the database through `SqlZenStore`.

Vendor
zenml-io
Product
zenml-io/zenml
CVSS
MEDIUM 5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-21
Original CVE updated
2026-07-22
Advisory published
2026-07-21
Advisory updated
2026-07-22

Who should care

Users of zenml-io/zenml version 0.94.2, especially those with multi-tenant ZenML Pro/Cloud deployments, should be aware of this vulnerability. It could potentially enable cross-tenant reconnaissance and further attacks.

Technical summary

The `GET /api/v1/stack-deployment/stack` endpoint in zenml-io/zenml version 0.94.2 lacks proper RBAC authorization checks. This allows any authenticated user to enumerate all deployed stacks across all users and tenants, exposing sensitive information such as infrastructure topology, service connector details, stack ownership, and deployment metadata. The vulnerability is caused by two issues: missing endpoint-level RBAC checks and the use of a server-side `Client()` that bypasses the RBAC enforcement layer by directly accessing the database through `SqlZenStore`.

Defensive priority

Medium priority due to the potential for cross-tenant reconnaissance and further attacks in multi-tenant environments.

Recommended defensive actions

  • Apply the patch from the vendor or upgrade to a fixed version of zenml-io/zenml.
  • Implement additional monitoring for unusual activity on the `GET /api/v1/stack-deployment/stack` endpoint.
  • Review and update access controls for the affected endpoint to ensure proper RBAC enforcement.
  • Consider compensating controls such as Web Application Firewalls (WAFs) to detect and prevent exploitation attempts.
  • Perform a thorough review of stack deployments to identify potential exposure.
  • Verify that all stack owners are aware of the vulnerability and its potential impact.
  • Conduct a source code review to ensure that similar vulnerabilities are not present in other endpoints.

Evidence notes

The CVE record was published on 2026-07-21T15:16:30.480Z and was last modified on 2026-07-22T19:16:54.103Z. The NVD entry is currently in the 'Received' status. Limited information is available about the specific affected configurations and potential mitigations.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-11876 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-11876

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-11876 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-11876

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.