Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server's pipeline and pipeline-version creation paths fetch a caller-supplied pipelineURL without restricting the destination. An authenticated caller with permission to create a pipeline or pipeline version can make requests from the API server to internal services and observe a limited status-code oracle. Arbitrary response-body disclosure, credential theft, and integrity or availability impact are not established. This issue is fixed in version 2.17.0.

Etkilenen sürümler1 yazılım

Kaynaklar6 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…elines/security/advisories/GHSA-f7vj-6669-qvv4 Diğer
• github.com/kubeflow/pipelines/pull/12750 Diğer
• github.com/…ommit/504d7797c1e061327ddb2bcb8bc1c5dd4940cfc3 Diğer
• github.com/kubeflow/pipelines/releases/tag/2.17.0 Diğer

Kayıt geçmişi

1. 6 Kas 2026 00:58Yayımlandı

İlgili açıklar

• 5,4 CVE-2026-88982Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)
• 9,6 CVE-2026-77596Kubeflow Pipelines API server lacks authorization for shared pipeline uploads
• 8,6 CVE-2026-88981Kubeflow Pipelines: Unauthenticated SSRF through artifact provider endpoints
• 8,6 CVE-2026-88980Kubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validator
• 5,8 CVE-2026-88979Kubeflow Pipelines: Unauthenticated SSRF vulnerability in Kubeflow Pipelines TensorBoard proxy
• 7,2 CVE-2026-88984Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelines