CVE-2026-110220

A flaw was found in Kubeflow Model Registry. This Server-Side Request Forgery SSRF vulnerability allows an authenticated namespace user to provide an attacker-controlled address within an InferenceService resource annotation. When the controller processes the resource, it makes an outgoing reques...

CVE-2026-110220 Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL Annotation

Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...

EUVD-2026-99261

Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...

CVE-2026-110220

The Kubeflow Model Registry (versions through 0.3.17 ) is vulnerable to a Server-Side Request Forgery (SSRF) flaw. The root cause lies in the handling of the modelregistry.kubeflow.org/url annotation within the InferenceService Controller . This allows namespace users to create an InferenceServic...

PT-2026-111844

Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...