CVE-2026-11876 Missing Authorization in get_deployed_stack Endpoint in zenml-io/zenml
An authenticated user can bypass RBAC checks to enumerate all deployed stacks and sensitive infrastructure details across all tenants in ZenML.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-11876?
CVE-2026-11876 is a medium-severity missing authorization vulnerability in zenml-io/zenml, published on 21 Jul 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
In zenml-io/zenml version 0.94.2, the `GET /api/v1/stack-deployment/stack` endpoint (`get_deployed_stack`) lacks proper RBAC authorization checks, allowing any authenticated user to enumerate all deployed stacks across all users and tenants. This includes stack component details, service connector information, and user IDs of stack owners. The vulnerability arises from two issues: missing endpoint-level RBAC checks and the use of a server-side `Client()` that bypasses the RBAC enforcement layer by directly accessing the database through `SqlZenStore`. This exposes sensitive information such as infrastructure topology, service connector details, stack ownership, and deployment metadata, potentially enabling cross-tenant reconnaissance and further attacks in multi-tenant ZenML Pro/Cloud deployments.
Weakness: CWE-862
Which versions are affected by CVE-2026-11876?
How do I fix CVE-2026-11876?
No fix has been published for CVE-2026-11876 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-11876 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-11876 exists.
Sources
Also known as GHSA-7jmq-cfcx-7mr9.