Skip to content
OpenAdvisories

Product · kubeflow

Model Registry

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-110220

    Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL Annotation

    Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService po…

    kubeflow Model Registry