CVE-2025-8406: ZenML is vulnerable to Path Traversal through its `PathMaterializer` class

October 5, 2025 (updated October 7, 2025)

ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses is_path_within_directory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file writes, potentially resulting in arbitrary command execution if critical files are overwritten.

References

github.com/advisories/GHSA-q92x-2x5g-h365
github.com/zenml-io/zenml
github.com/zenml-io/zenml/commit/5d22a48d7bf6c7f10b748577c2be79cc7969d398
huntr.com/bounties/a0880d64-9928-45bf-9663-2cd81582d9e7
nvd.nist.gov/vuln/detail/CVE-2025-8406

Code Behaviors & Features

Detect and mitigate CVE-2025-8406 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →