Skip to content
OpenAdvisories

Vendor

kubeflow

20 known vulnerabilities.

Products

pipelines 14 kubeflow/kubeflow 3 community-distribution 1 Kubeflow Pipeline View 1 Model Registry 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-88982

    Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the legacy V1/raw-Argo execution cache mutating webhook and cache-server storage path hash selected template fields without the Kubernetes nam…

    kubeflow pipelines github.com/kubeflow/pipelines Go
  • Medium 5.8
    CVE-2026-88979

    Kubeflow Pipelines: Unauthenticated SSRF vulnerability in Kubeflow Pipelines TensorBoard proxy

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 2.17.0 until 2.18.0, the TensorBoard proxy token introduced by the incomplete remediation for CVE-2026-54745 uses MINIO_SECRET_KEY as its HMAC secret, who…

    kubeflow pipelines
  • Medium 6.1
    CVE-2026-88986

    Kubeflow Pipelines: Reflected XSS in the frontend pod information and events error responses

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.15.0, the frontend routes /pipeline/k8s/pod and /pipeline/k8s/pod/events use frontend/server/k8s-helper.ts to include untrusted podname and podnames…

    kubeflow pipelines github.com/kubeflow/pipelines Go
  • Medium 6.5
    CVE-2026-88985

    Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server trusts structural SQL identifier fields decoded from the base64-encoded JSON page_token parameter before constructing list quer…

    kubeflow pipelines github.com/kubeflow/pipelines Go
  • Medium 5.0
    CVE-2026-88983

    Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server's pipeline and pipeline-version creation paths fetch a caller-supplied pipelineURL without restricting the destination. An auth…

    kubeflow pipelines github.com/kubeflow/pipelines Go
  • Medium 6.5
    CVE-2026-118760

    Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact reads

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.17.0, the frontend artifact routes did not check whether an authenticated user was authorized to access the requested namespace. A user who …

    kubeflow pipelines
  • Medium 5.4
    CVE-2023-6571

    Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow

    Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow

    kubeflow kubeflow/kubeflow