Kubeflow pipeline authorization issue vulnerability

Versions of Kubeflow Pipelines prior to 2.18.0 contain an authorization issue vulnerability. This vulnerability arises because when the target namespace is empty and REQUIRENAMESPACEFORPIPELINES is set to false, the canUploadVersionedPipeline function is invoked on both POST...

PT-2026-137748

Name of the Vulnerable Software and Affected Versions Kubeflow Pipelines versions prior to 2.18.0 Description An issue exists in the multi-user HTTP endpoints 'POST /apis/v2beta1/pipelines/upload' and 'POST /apis/v2beta1/pipelines/upload version' where the canUploadVersionedPipeline function fail...