CVE-2026-88985

A flaw was found in Kubeflow Pipelines, which can lead to information disclosure. An authenticated remote attacker with permissions to list pipelines or runs can exploit this vulnerability by submitting a crafted pagination token containing manipulated database query fields. Because the API serve...