CVE-2026-88984

Vendor

Kubeflow

Product

pipelines

CVSS v4.0

7.2 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-285, CWE-863

Exposure class

Developer platform, AI infrastructure

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 35
   CVE NVD 3h ago

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.16.1, the multi-user API server treats the empty namespace used by shared or global pipelines as an authorization…

   CVSS 7.2 Fix available CVE-2026-88984 Kubeflow