CVE-2026-88984

In Kubeflow Pipelines versions prior to 2.16.1 , a multi-user API server flaw allows an RBAC bypass regarding shared or global pipelines. The system incorrectly treats the empty namespace used by these pipelines as an authorization exception, enabling any authenticated user to modify or delete sh...