CVE-2026-110220

A flaw was found in Kubeflow Model Registry. This Server-Side Request Forgery SSRF vulnerability allows an authenticated namespace user to provide an attacker-controlled address within an InferenceService resource annotation. When the controller processes the resource, it makes an outgoing reques...