kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

CVE-2026-118761

A flaw was found in Kubeflow Pipelines. The API server does not properly restrict the size of decompressed data when processing uploaded archive files, performing decompression before authorization checks are completed. A remote, unauthenticated attacker could exploit this vulnerability by...

CVE-2026-118759

A flaw was found in Kubeflow Pipelines. An unauthenticated remote attacker with access to the API server can retrieve execution logs without proper authorization checks. By submitting requests with known workflow run and pod identifiers, an attacker can access live or archived logs from targeted...

SRS - Command Injection

SRS's v5.0.137v5.0.156, v6.0.18v6.0.47 api-server server is vulnerable to a drive-by command injection. id: CVE-2023-34105 info: name: SRS - Command Injection author: iamnoooob,rootxharsh,pdresearch severity: high description: | SRS's v5.0.137v5.0.156, v6.0.18v6.0.47 api-server server is vulnerab...

CVE-2020-8559

Kubernetes CVE-2020-8559 Proof of Concept PoC Exploit This is for demonstration purposes only. Only for use on systems you are authorized to preform administrative actions on and are authorized to exploit CVE-2020-8559 on This is a PoC for CVE-2020-8559 This vulnerability allows an attacker who h...

PoC-CVE-2026-23744

PoC-CVE-2026-23744 Remote Code Execution on MCPJam Inspector Reference https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6...

GHSA-8FMV-6RG5-5924 Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory

Summary The Kubeflow Pipelines API server decompresses uploaded pipeline archives without adequately bounding expanded data in affected versions. A small ZIP or gzip-compressed tar archive can consume disproportionately large amounts of memory while the server locates or reads the pipeline file,...

EUVD-2026-113219

Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory...

Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory

Summary The Kubeflow Pipelines API server decompresses uploaded pipeline archives without adequately bounding expanded data in affected versions. A small ZIP or gzip-compressed tar archive can consume disproportionately large amounts of memory while the server locates or reads the pipeline file,...

GHSA-WG5Q-X4J9-QM54 Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs

Summary The Kubeflow Pipelines API server's GET /apis/v1alpha1/runs/runid/nodes/nodeid/log handler retrieves logs without authorizing the caller against the selected run. A caller who can reach the backend and knows a victim run ID and a suitable pod or node identifier can read live or archived...

Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs

Summary The Kubeflow Pipelines API server's GET /apis/v1alpha1/runs/runid/nodes/nodeid/log handler retrieves logs without authorizing the caller against the selected run. A caller who can reach the backend and knows a victim run ID and a suitable pod or node identifier can read live or archived...

EUVD-2026-113216

Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs...

CVE-2026-118759

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/runid/nodes/nodeid/log handler retrieved logs without authorizing the caller against the selected run. A caller who can reach the backend a...

CVE-2026-118761

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives without adequately bounding expanded data while locating or reading the pipeline file. A small ZIP or gzip-compressed tar...

CVE-2026-118761 Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives without adequately bounding expanded data while locating or reading the pipeline file. A small ZIP or gzip-compressed tar...

CVE-2026-118761

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives without adequately bounding expanded data while locating or reading the pipeline file. A small ZIP or gzip-compressed tar...

CVE-2026-118761

Prior to version 2.18.0 , Kubeflow Pipelines is vulnerable to a decompression bomb attack during pipeline archive uploads. The API server fails to adequately bound expanded data when decompressing ZIP or gzip-compressed tar archives, potentially allowing a small archive to consume excessive memor...

CVE-2026-118761 Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives without adequately bounding expanded data while locating or reading the pipeline file. A small ZIP or gzip-compressed tar...

CVE-2026-118761 Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives without adequately bounding expanded data while locating or reading the pipeline file. A small ZIP or gzip-compressed tar...

CVE-2026-118759

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/runid/nodes/nodeid/log handler retrieved logs without authorizing the caller against the selected run. A caller who can reach the backend a...