Skip to content
Threat Feed
Subscribe

Product

Go/Github.com/Kubeflow/Pipelines (< 0.0.0-20260420170029-186dd1f3b040)

1 brief RSS
high advisory

Kubeflow Pipelines: RBAC authorization bypass for shared pipelines (CVE-2026-88984)

The Kubeflow Pipelines API server in multi-user mode skipped authorization checks for shared pipelines with an empty namespace, allowing authenticated users to modify or delete shared pipelines without required Kubernetes RBAC permissions.

go/github.com/kubeflow/pipelines
1c