CVE-2026-88983

A flaw was found in Kubeflow Pipelines. The API server does not restrict destination addresses when fetching caller-supplied URLs during pipeline or pipeline-version creation. An authenticated user with pipeline creation privileges can exploit this Server-Side Request Forgery SSRF vulnerability t...