CVE-2025-8406 Path Traversal in zenml-io/zenml

What is CVE-2025-8406?

CVE-2025-8406 is a medium-severity path traversal vulnerability in zenml-io/zenml, published on 5 Oct 2025. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

ZenML version 0.83.1 is affected by a path traversal vulnerability in the `PathMaterializer` class. The `load` function uses `is_path_within_directory` to validate files during `data.tar.gz` extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file writes, potentially resulting in arbitrary command execution if critical files are overwritten.

Weakness: CWE-22

Which versions are affected by CVE-2025-8406?

3 open source packages ship an affected version, including zenml. It affects 1 product.

Products include Zenml Zenml.

How do I fix CVE-2025-8406?

Upgrade zenml to 0.84.2 or later.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2025-8406 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-8406 exists.

Other vulnerabilities in zenml-io/zenml

• CVE-2024-2083 Directory Traversal in zenml-io/zenml Critical 9.9
• CVE-2024-28424 Code injection in n/a High 8.8
• CVE-2024-25723 ZenML Server Remote Privilege Escalation Vulnerability High 8.8
• CVE-2024-9340 Denial of Service (DoS) via Multipart Boundary in zenml-io/zenml High 7.5
• CVE-2024-2035 Improper Authorization in zenml-io/zenml Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-q92x-2x5g-h365, PYSEC-2026-2071.