CVE-2026-13451

A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...

CVE-2026-13451 Kserve: kserve: server-side request forgery via malicious storageuri

A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...

CVE-2026-13451

A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...