What’s Vulnerable › Products

kubeflow pipelines vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your kubeflow pipelines version is affected

Latest kubeflow pipelines vulnerabilities

• CVE-2026-118761 — Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory (CVSS 7.5)
• CVE-2026-118760 — Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact reads (CVSS 6.5)
• CVE-2026-118759 — Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant (CVSS 7.5)
• CVE-2026-118758 — Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact source (CVSS 7.5)
• CVE-2026-54745 — Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true (CVSS 10.0)
• CVE-2024-9526 — Stored XSS in Kubeflow Pipeline View (CVSS 5.4)