Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

13 matching records.

1. 43
   CVE NVD 2h ago

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the multi-user HTTP endpoints POST /apis/v2beta1/pipelines/upload and POST…

   CVSS 9.6 Fix available CVE-2026-77596 Kubeflow AI infrastructure
2. 35
   CVE NVD 2h ago

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.16.1, the multi-user API server treats the empty namespace used by shared or global pipelines as an authorization…

   CVSS 7.2 Fix available CVE-2026-88984 Kubeflow Developer platform
3. 35
   CVE NVD 2h ago

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the frontend artifact download path for source=s3 or source=minio accepts providerInfo.Params.endpoint, and the…

   CVSS 8.6 Fix available CVE-2026-88981 Kubeflow Storage / NAS
4. 35
   CVE NVD 2h ago

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the frontend GET /artifacts/get route accepts source=http or source=https with caller-controlled bucket and key…

   CVSS 8.6 Fix available CVE-2026-88980 Kubeflow AI infrastructure
5. 28
   CVE NVD 2h ago

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the legacy V1/raw-Argo execution cache mutating webhook and cache-server storage path hash selected template…

   CVSS 5.4 Fix available CVE-2026-88982 Kubeflow Developer platform
6. 28
   CVE NVD 2h ago

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 2.17.0 until 2.18.0, the TensorBoard proxy token introduced by the incomplete remediation for CVE-2026-54745 uses…

   CVSS 5.8 Fix available CVE-2026-88979 Kubeflow AI infrastructure
7. 28
   CVE NVD 3h ago

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.15.0, the frontend routes /pipeline/k8s/pod and /pipeline/k8s/pod/events use frontend/server/k8s-helper.ts to include…

   CVSS 6.1 Fix available CVE-2026-88986 Kubeflow Developer platform
8. 28
   CVE NVD 3h ago

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server trusts structural SQL identifier fields decoded from the base64-encoded JSON page_token parameter…

   CVSS 6.5 Fix available CVE-2026-88985 Kubeflow AI infrastructure
9. 28
   CVE NVD 3h ago

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

   Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server's pipeline and pipeline-version creation paths fetch a caller-supplied pipelineURL without…

   CVSS 5.0 Fix available CVE-2026-88983 Kubeflow AI infrastructure
10. 20
    CVE NVD 7d ago

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives without adequately bounding expanded data while locating…

    CVSS 7.5 Fix available CVE-2026-118761 Kubeflow AI infrastructure
11. 20
    CVE NVD 7d ago

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log handler retrieved logs without authorizing…

    CVSS 7.5 Fix available CVE-2026-118759 Kubeflow AI infrastructure
12. 20
    CVE NVD 7d ago

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the volume artifact handler for GET /artifacts/get?source=volume did not confine a caller-supplied file path to…

    CVSS 7.5 Fix available CVE-2026-118758 Kubeflow AI infrastructure
13. 13
    CVE NVD 7d ago

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows.

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.17.0, the frontend artifact routes did not check whether an authenticated user was authorized to access the…

    CVSS 6.5 Fix available CVE-2026-118760 Kubeflow AI infrastructure

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Kubeflow&limit=100. RSS for this section: feed.xml.