kubeflow has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was October 2026 with 4. The median CVSS is 7.5 (high). Most affected products: github.com/kubeflow/pipelines (2), pipelines (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Products
- github.com/kubeflow/pipelines 2
- pipelines 2
Worst active — by depth score
CVE-2026-118761High· 7.5Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory41CVE-2026-118759High· 7.5Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs41CVE-2026-118758High· 7.5Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact source41CVE-2026-118760Medium· 6.5Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact reads36
kubeflow vulnerabilities
CVEs affecting kubeflow, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-118759High· 7.5Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs
Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs
CVE-2026-118761High· 7.5Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory
Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory
CVE-2026-118758High· 7.5Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact source
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the volume artifact handler for GET /artifacts/get?source=volume did not confine a caller-supplied file path to the sele…
CVE-2026-118760Medium· 6.5Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact reads
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.17.0, the frontend artifact routes did not check whether an authenticated user was authorized to access the requested …