Skip to content
Threat Feed
Subscribe

Product

Kubeflow Pipelines (< 2.18.0)

1 brief RSS
high advisory

Kubeflow Pipelines: API authorization bypass for log access (CVE-2026-118759)

An authorization bypass in the Kubeflow Pipelines API server allows unauthenticated or unauthorized users to read sensitive logs by manipulating the GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log handler.

Kubeflow Pipelines api-security kubernetes data-exposure path-traversal web-application
1t 2c