{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3akubeflowmodel_registry/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:kubeflow:model_registry:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-110220"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Model Registry (\u003c= 0.3.17)"],"_cs_severities":["high"],"_cs_tags":["kubernetes","ssrf","cloud-native","kubeflow"],"_cs_type":"advisory","_cs_vendors":["Kubeflow"],"content_html":"\u003cp\u003eKubeflow Model Registry versions through 0.3.17 are susceptible to a server-side request forgery (SSRF) vulnerability identified as CVE-2026-110220. The flaw resides in the handling of the 'modelregistry.kubeflow.org/url' annotation. A malicious actor with standard namespace-level access can manipulate this annotation to force the controller service to make arbitrary outbound HTTP requests. By pointing this annotation to an attacker-controlled listener, the controller transmits its bearer token, which is often a high-privilege ServiceAccount token. Successful exploitation grants the attacker the ability to manage or modify InferenceServices across the entire Kubernetes cluster, effectively breaking tenant isolation and compromising the platform's control plane.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a low-privileged user to escalate their access to cluster-wide control over InferenceServices. This leads to unauthorized data access, potential exfiltration of proprietary machine learning models, and the ability to manipulate service deployments across multiple tenants. The severity of this vulnerability is rated as 7.1 (High) on the CVSS v3.1 scale.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately upgrade Kubeflow Model Registry to a version beyond 0.3.17 to remediate CVE-2026-110220.\u003c/li\u003e\n\u003cli\u003eAudit Kubernetes ServiceAccount permissions to ensure the controller ServiceAccount follows the principle of least privilege.\u003c/li\u003e\n\u003cli\u003eImplement egress network policies to restrict the ability of the Model Registry controller to initiate outbound connections to unauthorized internal or external endpoints.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-14T04:38:35Z","date_published":"2026-10-14T04:38:35Z","id":"https://feed.craftedsignal.io/briefs/2026-10-kubeflow-ssrf/","summary":"Kubeflow Model Registry versions up to 0.3.17 contain a server-side request forgery vulnerability allowing namespace users to exfiltrate ServiceAccount tokens and gain cluster-wide privileges.","title":"Kubeflow Model Registry Server-Side Request Forgery","url":"https://feed.craftedsignal.io/briefs/2026-10-kubeflow-ssrf/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:kubeflow:model_registry:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}