kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

SRS - Command Injection

SRS's v5.0.137v5.0.156, v6.0.18v6.0.47 api-server server is vulnerable to a drive-by command injection. id: CVE-2023-34105 info: name: SRS - Command Injection author: iamnoooob,rootxharsh,pdresearch severity: high description: | SRS's v5.0.137v5.0.156, v6.0.18v6.0.47 api-server server is vulnerab...

CVE-2020-8559

Kubernetes CVE-2020-8559 Proof of Concept PoC Exploit This is for demonstration purposes only. Only for use on systems you are authorized to preform administrative actions on and are authorized to exploit CVE-2020-8559 on This is a PoC for CVE-2020-8559 This vulnerability allows an attacker who h...

PoC-CVE-2026-23744

PoC-CVE-2026-23744 Remote Code Execution on MCPJam Inspector Reference https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6...

CVE-2026-126394 vLLM 0.30.0 before 0.31.0 Resource Exhaustion via OpenPangu Video Backend num_frames

vLLM 0.30.0 before 0.31.0 contains a resource exhaustion vulnerability in OpenCVDynamicOpenPanguVideoBackend, which uses request-controlled numframes without an effective ceiling. Unauthenticated attackers can send /v1/chat/completions or /tokenize requests selecting the openpangu videobackend wi...

EUVD-2026-125167

vLLM from 0.28.0 before 0.30.0 contains a reachable assertion vulnerability in GPUModelRunner.initxdropepositions that allows remote attackers to crash the engine by submitting embeddings-only requests. Attackers can send a /v1/completions request containing only promptembeds to XD-RoPE models wi...

CVE-2026-126939

Versions of Zipline prior to 4.6.4 are vulnerable to an information disclosure flaw in the GET /api/server/folder/:id endpoint. An unauthenticated attacker who possesses a folder UUID can supply a page query parameter to bypass the metadata-only early return. This allows for the enumeration of fi...

EUVD-2026-125126

Zipline before 4.6.4 contains an information disclosure vulnerability in GET /api/server/folder/:id that allows unauthenticated attackers to list files in non-public upload-only folders. Attackers who know the folder UUID can supply the page query parameter to bypass the metadata-only early retur...

CVE-2026-126939 Zipline before 4.6.4 Unauthenticated File Listing via page Query Parameter

Zipline before 4.6.4 contains an information disclosure vulnerability in GET /api/server/folder/:id that allows unauthenticated attackers to list files in non-public upload-only folders. Attackers who know the folder UUID can supply the page query parameter to bypass the metadata-only early retur...

GHSA-R4MX-2GR2-8277 Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server

Summary Kubeflow Pipelines API server does not sufficiently validate SQL identifier fields decoded from the pagetoken pagination parameter. Client-controlled fields can reach SQL query construction, allowing SQL injection through list APIs. This advisory consolidates the original pipeline-listing...

EUVD-2026-117824

Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server...

Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server

Summary Kubeflow Pipelines API server does not sufficiently validate SQL identifier fields decoded from the pagetoken pagination parameter. Client-controlled fields can reach SQL query construction, allowing SQL injection through list APIs. This advisory consolidates the original pipeline-listing...

EUVD-2026-117826

Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelines...

Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation

Summary The Kubeflow Pipelines API server fetched caller-supplied pipeline package URLs without restricting the destination. A caller authorized to create a pipeline or pipeline version could cause requests to originate from the API server's network position, including to internal services that t...

GHSA-F7VJ-6669-QVV4 Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation

Summary The Kubeflow Pipelines API server fetched caller-supplied pipeline package URLs without restricting the destination. A caller authorized to create a pipeline or pipeline version could cause requests to originate from the API server's network position, including to internal services that t...

EUVD-2026-117821

Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation...

Kubeflow Pipelines API server lacks authorization for shared pipeline uploads

Summary In multi-user mode, the Kubeflow Pipelines API server's HTTP multipart upload endpoints POST /apis/v2beta1/pipelines/upload and POST /apis/v2beta1/pipelines/uploadversion perform no authorization when the target namespace is empty. The authorization helper canUploadVersionedPipeline retur...

GHSA-RJR3-43J3-4Q8G Kubeflow Pipelines API server lacks authorization for shared pipeline uploads

Summary In multi-user mode, the Kubeflow Pipelines API server's HTTP multipart upload endpoints POST /apis/v2beta1/pipelines/upload and POST /apis/v2beta1/pipelines/uploadversion perform no authorization when the target namespace is empty. The authorization helper canUploadVersionedPipeline retur...

CVE-2026-96285

Apache Airflow 3.3.1 shipped a fix for CVE-2026-67260 that checks the scheduler's decoded nextkwargs value is a dictionary, but performs that check only after deserializing the whole stored payload. Deserialization reconstructs nested objects of classes permitted by the deserialization allow-list...

CVE-2026-82337

Apache Airflow rebuilt deadline alert fields through generic deserialization, which imports and instantiates the class named in the serialized Dag, in the scheduler and API server. A Dag author could cause classes within Airflow's deserialization allow list to be constructed in those processes wi...