CVE-2026-88983

Prior to version 2.17.0 , Kubeflow Pipelines is vulnerable to a Server-Side Request Forgery (SSRF) flaw. The API server's pipeline and pipeline-version creation paths fetch a caller-supplied pipelineURL without validating the destination. This allows an authenticated caller with permissions to cr...