CVE-2026-118761

A flaw was found in Kubeflow Pipelines. The API server does not properly restrict the size of decompressed data when processing uploaded archive files, performing decompression before authorization checks are completed. A remote, unauthenticated attacker could exploit this vulnerability by...