CVE-2024-25723
mediumpriority · track · 35EPSS 0.708 · 99 %ileexploit · PoCEURUUSEPSS · scored 2026-10-27
ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/{user_name_or_id}/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. These are also patched versions: 0.44.4, 0.43.1, and 0.42.2.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.3–8.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (1)
Public proof-of-concept and weaponised exploit code.
affected products (10)
Products and version ranges known to be affected.
advisories (2)
Vendor and ecosystem advisories describing this.
- GHSA-vf7j-cmrj-pmmmZenML Server Remote Privilege Escalation Vulnerability2024-02-27ghsa · osvUS
ZenML Server in the ZenML package before 0.46.7 for Python allows remote privilege escalation because the `/api/v1/users/{user_name_or_id}/activate` REST API endpoint allows access on the basis of a valid username along with a new password in the request body. These are also patched versions: 0.44.4, 0.43.1, and 0.42.2.
- PYSEC-2026-2072ZenML Server Remote Privilege Escalation Vulnerability2026-07-07vendor · osvUS
ZenML Server in the ZenML package before 0.46.7 for Python allows remote privilege escalation because the `/api/v1/users/{user_name_or_id}/activate` REST API endpoint allows access on the basis of a valid username along with a new password in the request body. These are also patched versions: 0.44.4, 0.43.1, and 0.42.2.
also known as (7)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (16)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2024-25723/cnnvd
- https://github.com/zenml-io/zenmlcnnvd
- https://github.com/zenml-io/zenml/compare/0.42.1...0.42.2cnnvd
- https://github.com/zenml-io/zenml/compare/0.43.0...0.43.1cnnvd
- https://github.com/zenml-io/zenml/compare/0.44.3...0.44.4cnnvd
- https://www.zenml.io/blog/critical-security-update-for-zenml-userscnnvd
- https://github.com/zenml-io/zenmlenisa_euvd
- https://github.com/zenml-io/zenml/compare/0.42.1...0.42.2enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan