PT-2026-132394

Name of the Vulnerable Software and Affected Versions Kubeflow Pipelines versions prior to 2.18.0 Description The API server fails to authorize callers when retrieving logs via the 'GET /apis/v1alpha1/runs/run id/nodes/node id/log' endpoint. An attacker with backend access who knows a victim run ...