The vulnerability exists in zenml-io/zenml 0.94.2 where the GET /api/v1/stack-deployment/stack endpoint, referred to as get_deployed_stack, performs no RBAC checks. Any authenticated user can call this endpoint and retrieve the full list of deployed stacks, with component details, service connector information, and the user IDs of stack owners. The flaw arises from a missing endpoint-level authorization guard and the use of a server‑side Client that bypasses the normal RBAC enforcement by accessing the database directly through SqlZenStore. The disclosure of such sensitive deployment metadata enables an attacker to map infrastructure topology, identify potential exploit vectors, and carry out cross‑tenant reconnaissance in multi‑tenant ZenML Pro/Cloud deployments.

ZenML from zenml‑io, open‑source repository zenml‑io/zenml, version 0.94.2. No other vendors or product versions are listed as impacted.

The CVSS base score of 5 indicates medium severity. The EPSS score is less than 1 %, suggesting a low chance of exploitation given current conditions. The vulnerability is not listed in CISA’s KEV catalog. Exploitation requires only authenticated access; remote code execution or privilege escalation are not implied. Attackers could target any tenant in a multi‑tenant deployment, but must first obtain valid credentials.