CVE-2026-54745: falha crítica em kubeflow pipelines
Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 10epss 0.6%
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /_proxy/ route in frontend/server/proxy-middleware.ts. The _routePathWithReferer() function accepts an arbitrary attacker-controlled HTTP or HTTPS target and passes its origin to createProxyMiddleware without a host allowlist or filtering for loopback, link-local, RFC1918, or cluster-local addresses. The route remains outside the authorization middleware when ENABLE_AUTHZ=true and is reachable through /apis/v1beta1/_proxy/, /apis/v2beta1/_proxy/, /pipeline/apis/v1beta1/_proxy/, and /pipeline/apis/v2beta1/_proxy/, including through a crafted Referer header. Requests can forward attacker-controlled methods, headers such as Authorization, Cookie, and X-Forwarded-For, and POST bodies to reachable internal services, while returning the upstream response to the unauthenticated client. This can expose cloud metadata credentials, Kubernetes or service APIs, and other cluster-internal endpoints to unauthorized read or modification. This issue is fixed in version 2.17.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
kubeflow · pipelinesCVEs relacionadas — kubeflow pipelines
No mesmo produto, das mais perigosas para as menos.
CVE-2026-88980HIGHKubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validatorEPSS 0.6%CVE-2026-118758HIGHKubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact sourceEPSS 0.5%CVE-2026-118761HIGHKubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memoryEPSS 0.5%CVE-2026-118760MEDIUMKubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact readsEPSS 0.4%CVE-2026-118759HIGHKubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenantEPSS 0.3%CVE-2026-88984HIGHKubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelinesEPSS 0.3%