Skip to content
OpenAdvisories

Vendor

kubeflow

20 known vulnerabilities.

Products

pipelines 14 kubeflow/kubeflow 3 community-distribution 1 Kubeflow Pipeline View 1 Model Registry 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-77596

    Kubeflow Pipelines API server lacks authorization for shared pipeline uploads

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the multi-user HTTP endpoints POST /apis/v2beta1/pipelines/upload and POST /apis/v2beta1/pipelines/upload_version call canUploadVersionedPipel…

    kubeflow pipelines github.com/kubeflow/pipelines Go
  • Critical 10.0
    CVE-2026-54745

    Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /_proxy/ route in frontend/se…

    kubeflow pipelines