Kubeflow Pipelines API server lacks authorization for shared pipeline uploads

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the multi-user HTTP endpoints POST /apis/v2beta1/pipelines/upload and POST /apis/v2beta1/pipelines/upload_version call canUploadVersionedPipeline, which returns without SubjectAccessReview when the target namespace is empty while REQUIRE_NAMESPACE_FOR_PIPELINES defaults to false. A low-privilege tenant can create shared pipelines or inject attacker-controlled versions into existing shared pipelines without the required write permission; if the API server is directly reachable without an authenticating proxy, an unauthenticated caller can exploit the same bypass, while deployments protected by such a proxy do not expose anonymous access. An enabled unpinned recurring run that follows the latest version can then execute the injected specification in another tenant's namespace under that workload's service account, while pinned or embedded-specification runs are not automatically substituted. This issue is fixed in version 2.18.0.

Etkilenen sürümler1 yazılım

Kaynaklar6 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…elines/security/advisories/GHSA-rjr3-43j3-4q8g Diğer
• github.com/kubeflow/pipelines/pull/14352 Diğer
• github.com/…ommit/62516d8c525f146b754cb515cf441dd0290ad841 Diğer
• github.com/kubeflow/pipelines/releases/tag/2.18.0 Diğer

Kayıt geçmişi

1. 6 Kas 2026 01:23Yayımlandı

İlgili açıklar

• 5,4 CVE-2026-88982Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)
• 8,6 CVE-2026-88981Kubeflow Pipelines: Unauthenticated SSRF through artifact provider endpoints
• 8,6 CVE-2026-88980Kubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validator
• 5,8 CVE-2026-88979Kubeflow Pipelines: Unauthenticated SSRF vulnerability in Kubeflow Pipelines TensorBoard proxy
• 7,2 CVE-2026-88984Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelines
• 6,1 CVE-2026-88986Kubeflow Pipelines: Reflected XSS in the frontend pod information and events error responses