Kubeflow Pipelines: API authorization bypass for log access (CVE-2026-118759)
An authorization bypass in the Kubeflow Pipelines API server allows unauthenticated or unauthorized users to read sensitive logs by manipulating the GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log handler.
CVE search metadata
CVE search record: CVE-2026-118759. Severity: high. CVSS: 7.5. KEV: no. Product: Kubeflow Pipelines (< 2.18.0). Brief: Kubeflow Pipelines: API authorization bypass for log access (CVE-2026-118759). Brief link: https://feed.craftedsignal.io/briefs/2026-10-kubeflow-auth-bypass/
CVE search record: CVE-2026-118758. Severity: high. CVSS: 7.5. KEV: no. Product: Kubeflow Pipelines (< 2.18.0). Brief: Kubeflow Pipelines: API authorization bypass for log access (CVE-2026-118759). Brief link: https://feed.craftedsignal.io/briefs/2026-10-kubeflow-auth-bypass/
Triage facts
Revision 2- Applicability
- Kubeflow Pipelines (< 2.18.0)
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 2 public sources
- Freshness
- Revision 2Oct 29, 18:47 UTC
- Vulnerabilities
- 2 CVEs
- Source quality
- A1Likely
Revision history 1 entry · Revision 2
- Revision 2
added CVE-2026-118758
Changed: cves, lastmod, references, tags, updates
Sources: 1
Kubeflow Pipelines prior to version 2.18.0 contains a vulnerability in the API server log handler. The handler does not perform authorization checks against the requested run ID, allowing any caller with network access to the API server to retrieve logs. For live logs, the vulnerability allows an attacker to specify a node ID as a pod name, which enables cross-namespace log access for pods not associated with the requested run. This can lead to the exposure of sensitive workload data or hardcoded credentials.
Impact
Unauthorized access to logs across the Kubeflow environment. Observed potential impact includes unauthorized reading of sensitive workload data and exposure of credentials stored within pipeline logs.
Recommendation
- Upgrade Kubeflow Pipelines to version 2.18.0 or later immediately.
- Evaluate current network policies and authentication gates surrounding the Kubeflow API server to ensure requests are limited to trusted clients, as the API handler does not perform independent authentication.
Immediate actions
Upgrade Kubeflow Pipelines to version 2.18.0
Threat Hunt
Identify unauthorized log access requests to the Kubeflow API
Data: Kubeflow API server access logs (HTTP GET requests)
Mitigations
Implement strict network policy or external authentication gate for the Kubeflow API server
CVE-2026-118759