949 matches found
CVE-2026-118758
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the volume artifact handler for GET /artifacts/get?source=volume did not confine a caller-supplied file path to the selected volume. A caller who can reach the route and identify a...
CVE-2026-118761
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives without adequately bounding expanded data while locating or reading the pipeline file. A small ZIP or gzip-compressed tar...
CVE-2026-118761 Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives without adequately bounding expanded data while locating or reading the pipeline file. A small ZIP or gzip-compressed tar...
CVE-2026-118761 Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives without adequately bounding expanded data while locating or reading the pipeline file. A small ZIP or gzip-compressed tar...
EUVD-2026-113219
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives without adequately bounding expanded data while locating or reading the pipeline file. A small ZIP or gzip-compressed tar...
CVE-2026-118761
Prior to version 2.18.0 , Kubeflow Pipelines is vulnerable to a decompression bomb attack during pipeline archive uploads. The API server fails to adequately bound expanded data when decompressing ZIP or gzip-compressed tar archives, potentially allowing a small archive to consume excessive memor...
CVE-2026-118760
Kubeflow Pipelines versions 0.5.1 through 2.17.0 are vulnerable to a missing namespace authorization flaw. The frontend artifact routes fail to verify if an authenticated user is authorized to access the requested namespace. An attacker who knows an artifact's location can access datasets, models...
CVE-2026-118760 Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact reads
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.17.0, the frontend artifact routes did not check whether an authenticated user was authorized to access the requested namespace. A user who can reach the frontend and knows an...
CVE-2026-118759 Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/runid/nodes/nodeid/log handler retrieved logs without authorizing the caller against the selected run. A caller who can reach the backend a...
CVE-2026-118759
In Kubeflow Pipelines versions prior to 2.18.0 , a vulnerability exists in the API server's GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log handler. The root cause is a failure to authorize callers against the selected run, allowing an attacker with network reachability to retrieve live or a...
CVE-2026-118758
Kubeflow Pipelines versions prior to 2.18.0 are vulnerable to an unauthenticated path traversal vulnerability in the volume artifact handler for GET /artifacts/get?source=volume. The root cause is a failure to confine caller-supplied file paths to the selected volume, allowing an attacker to read...
EUVD-2026-113214
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the volume artifact handler for GET /artifacts/get?source=volume did not confine a caller-supplied file path to the selected volume. A caller who can reach the route and identify a...
CVE-2026-118758 Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact source
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the volume artifact handler for GET /artifacts/get?source=volume did not confine a caller-supplied file path to the selected volume. A caller who can reach the route and identify a...
CVE-2026-118758 Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact source
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the volume artifact handler for GET /artifacts/get?source=volume did not confine a caller-supplied file path to the selected volume. A caller who can reach the route and identify a...
GHSA-27R3-JXMH-P828 vulnerabilities
Vulnerabilities for packages: code-server, langfuse, kubeflow-centraldashboard, thingsboard, tileserver-gl, json-server...
CVE-2026-111181 vulnerabilities
Vulnerabilities for packages: code-server, langfuse, kubeflow-centraldashboard, thingsboard, tileserver-gl, json-server...
CVE-2026-114140 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
GHSA-PJVX-PRJX-H659 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...