Kubeflow Pipelines: Unauthenticated SSRF vulnerability in Kubeflow Pipelines TensorBoard proxy

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 2.17.0 until 2.18.0, the TensorBoard proxy token introduced by the incomplete remediation for CVE-2026-54745 uses MINIO_SECRET_KEY as its HMAC secret, whose bundled default is publicly known. In an authorization-disabled deployment using that default, an unauthenticated attacker can forge a token containing a chosen viewerName and namespace; the proxy constructs the destination from the viewerName plus the -service suffix, the namespace, and the configured cluster domain, then reads responses on port 80 under the /tensorboard/<viewer>/ path. Resource-name validation and path-traversal rejection remain enforced, authorization-enabled deployments still check access to the selected namespace, and unrestricted metadata access, writes, or service disruption are not established. This issue is fixed in version 2.18.0.

Etkilenen sürümler1 yazılım

Kaynaklar6 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…elines/security/advisories/GHSA-j429-j7xw-8j9h Diğer
• github.com/kubeflow/pipelines/pull/14346 Diğer
• github.com/…ommit/c8effaed62476a8d8c99d3a6cfdd404a04ef99d8 Diğer
• github.com/kubeflow/pipelines/releases/tag/2.18.0 Diğer

Kayıt geçmişi

1. 6 Kas 2026 01:14Yayımlandı

İlgili açıklar

• 5,4 CVE-2026-88982Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)
• 9,6 CVE-2026-77596Kubeflow Pipelines API server lacks authorization for shared pipeline uploads
• 8,6 CVE-2026-88981Kubeflow Pipelines: Unauthenticated SSRF through artifact provider endpoints
• 8,6 CVE-2026-88980Kubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validator
• 7,2 CVE-2026-88984Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelines
• 6,1 CVE-2026-88986Kubeflow Pipelines: Reflected XSS in the frontend pod information and events error responses