CVE-2026-88980

Versions of Kubeflow Pipelines prior to 2.18.0 are vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) . The vulnerability exists in the frontend GET /artifacts/get route, where the isAllowedResourceName validator permits all-digit decimal hosts. These hosts are subsequently conve...

CVE-2026-88980 Kubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validator

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the frontend GET /artifacts/get route accepts source=http or source=https with caller-controlled bucket and key values, and isAllowedResourceName permits an all-digit decimal host...