CVE-2026-18620

CVE-2026-18620 affects Data Science Pipelines. A restricted user/tenant can abuse an improper authorization in the setDefaultServiceAccount function by supplying a more privileged ServiceAccount in a CreateRun request, bypassing checks and enabling containers to run with elevated privileges. This...