CVE-2026-118759

A flaw was found in Kubeflow Pipelines. An unauthenticated remote attacker with access to the API server can retrieve execution logs without proper authorization checks. By submitting requests with known workflow run and pod identifiers, an attacker can access live or archived logs from targeted...