CVE-2026-88985

Prior to version 2.17.0 , Kubeflow Pipelines is vulnerable to an SQL injection vulnerability in its API server. The application trusts structural SQL identifier fields decoded from the base64-encoded JSON page_token parameter when constructing list queries. An attacker capable of invoking an affe...