CVE-2026-88983Medium· 5.0▾ SunlitKubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server's pipeline and pipeline-version creation paths fetch a caller-supplied pipelineURL without restricting th…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 27.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server's pipeline and pipeline-version creation paths fetch a caller-supplied pipelineURL without restricting the destination. An authenticated caller with permission to create a pipeline or pipeline version can make requests from the API server to internal services and observe a limited status-code oracle. Arbitrary response-body disclosure, credential theft, and integrity or availability impact are not established. This issue is fixed in version 2.17.0.
pipelines < 2.17.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-88985Medium· 6.5Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server
CVE-2026-88979Medium· 5.8Kubeflow Pipelines: Unauthenticated SSRF vulnerability in Kubeflow Pipelines TensorBoard proxy
CVE-2026-88980High· 8.6Kubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validator
CVE-2026-88981High· 8.6Kubeflow Pipelines: Unauthenticated SSRF through artifact provider endpoints
CVE-2026-118760Medium· 6.5Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact reads
CVE-2026-88986Medium· 6.1Kubeflow Pipelines: Reflected XSS in the frontend pod information and events error responses