CVE-2024-28424: Zenml

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

zenml v0.55.4 was discovered to contain an arbitrary file upload vulnerability in the load function at /materializers/cloudpickle_materializer.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file.

Affected products

• Zenml Zenml: version 0.55.4 only

Published 2024-03-14. Last modified 2026-06-17.