Vulnerabilities in kubeflow
20 resultsCVE-2024-5552HIGHReDoS in kubeflow/kubeflowEPSS 0.6%CVE-2026-54745CRITICALKubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=trueEPSS 0.6%CVE-2023-6570HIGHServer-Side Request Forgery (SSRF) in kubeflow/kubeflowEPSS 0.6%CVE-2026-118758HIGHKubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact sourceEPSS 0.5%CVE-2026-118761HIGHKubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memoryEPSS 0.5%CVE-2023-6571MEDIUMCross-site Scripting (XSS) - Reflected in kubeflow/kubeflowEPSS 0.4%CVE-2026-47237HIGHKubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token StealingEPSS 0.4%CVE-2026-118760MEDIUMKubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact readsEPSS 0.4%CVE-2026-110220HIGHKubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL AnnotationEPSS 0.3%CVE-2026-118759HIGHKubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenantEPSS 0.3%CVE-2024-9526HIGHStored XSS in Kubeflow Pipeline ViewEPSS 0.2%CVE-2026-88983MEDIUMKubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validationEPSS —CVE-2026-88979MEDIUMKubeflow Pipelines: Unauthenticated SSRF vulnerability in Kubeflow Pipelines TensorBoard proxyEPSS —CVE-2026-88980HIGHKubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validatorEPSS —CVE-2026-88984HIGHKubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelinesEPSS —CVE-2026-88981HIGHKubeflow Pipelines: Unauthenticated SSRF through artifact provider endpointsEPSS —CVE-2026-88982MEDIUMKubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)EPSS —CVE-2026-88986MEDIUMKubeflow Pipelines: Reflected XSS in the frontend pod information and events error responsesEPSS —CVE-2026-77596CRITICALKubeflow Pipelines API server lacks authorization for shared pipeline uploadsEPSS —CVE-2026-88985MEDIUMKubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API serverEPSS —