Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability in zenml-io/zenml versions 0.57.0 through 0.94.2 allows an attacker to bypass rate-limiting on the `POST /api/v1/login` and self password-change endpoints by rotating the `X-Forwarded-For` header. The rate limiter keys requests by `request.client.host`, which is derived from the `X-Forwarded-For` header when Uvicorn is launched with `--proxy-headers --forwarded-allow-ips *`. This configuration allows clients to control the value of `request.client.host`, effectively bypassing rate-limiting protections. This vulnerability leaves the affected endpoints open to unthrottled credential guessing attacks.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-11922 Rate-Limiting Bypass in ZenML 0.57.0 Through 0.94.2 via X-Forwarded-For Header https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11922
Post summary
CVE-2026-11922 exposes a rate‑limiting bypass in ZenML 0.57.0 to 0.94.2 through manipulation of the X-Forwarded-For header."