EUVD-2026-113216

Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs...

Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs

Summary The Kubeflow Pipelines API server's GET /apis/v1alpha1/runs/runid/nodes/nodeid/log handler retrieves logs without authorizing the caller against the selected run. A caller who can reach the backend and knows a victim run ID and a suitable pod or node identifier can read live or archived...

GHSA-WG5Q-X4J9-QM54 Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs

Summary The Kubeflow Pipelines API server's GET /apis/v1alpha1/runs/runid/nodes/nodeid/log handler retrieves logs without authorizing the caller against the selected run. A caller who can reach the backend and knows a victim run ID and a suitable pod or node identifier can read live or archived...

CVE-2026-118759

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/runid/nodes/nodeid/log handler retrieved logs without authorizing the caller against the selected run. A caller who can reach the backend a...

CVE-2026-118759

In Kubeflow Pipelines versions prior to 2.18.0 , a vulnerability exists in the API server's GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log handler. The root cause is a failure to authorize callers against the selected run, allowing an attacker with network reachability to retrieve live or a...

CVE-2026-118759

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/runid/nodes/nodeid/log handler retrieved logs without authorizing the caller against the selected run. A caller who can reach the backend a...

CVE-2026-118759 Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/runid/nodes/nodeid/log handler retrieved logs without authorizing the caller against the selected run. A caller who can reach the backend a...

CVE-2026-118759 Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/runid/nodes/nodeid/log handler retrieved logs without authorizing the caller against the selected run. A caller who can reach the backend a...

CVE-2026-118759 Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/runid/nodes/nodeid/log handler retrieved logs without authorizing the caller against the selected run. A caller who can reach the backend a...

CVE-2026-118759: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/runid/nodes/nodeid/log handler retrieved logs without authorizing the caller against the selected run. A caller who can reach the backend a...

Kubeflow pipeline information disclosure vulnerability

Versions of Kubeflow Pipelines prior to 2.18.0 contain a security vulnerability. This vulnerability arises because the GET /apis/v1alpha1/runs/runid/nodes/nodeid/log handler in the API server fails to authenticate callers and does not verify whether the pod belongs to the requested run. As a...

PT-2026-132394

Name of the Vulnerable Software and Affected Versions Kubeflow Pipelines versions prior to 2.18.0 Description The API server fails to authorize callers when retrieving logs via the 'GET /apis/v1alpha1/runs/run id/nodes/node id/log' endpoint. An attacker with backend access who knows a victim run ...

Design/Logic Flaw

An incorrect default permission vulnerability exists in the cgiserver.cgi cgicheckability functionality of reolink RLC-410W v3.0.0.13620121102. All the Get APIs that are not included in cgicheckability are already executable by any logged-in users. An attacker can send an HTTP request to trigger...