{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/kubeflow-pipelines--2.18.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:kubeflow:pipelines:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-118759"},{"cvss":7.5,"id":"CVE-2026-118758"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Kubeflow Pipelines (\u003c 2.18.0)"],"_cs_severities":["high"],"_cs_tags":["api-security","kubernetes","data-exposure","path-traversal","web-application"],"_cs_type":"advisory","_cs_vendors":["Kubeflow"],"content_html":"\u003cp\u003eKubeflow Pipelines prior to version 2.18.0 contains a vulnerability in the API server log handler. The handler does not perform authorization checks against the requested run ID, allowing any caller with network access to the API server to retrieve logs. For live logs, the vulnerability allows an attacker to specify a node ID as a pod name, which enables cross-namespace log access for pods not associated with the requested run. This can lead to the exposure of sensitive workload data or hardcoded credentials.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eUnauthorized access to logs across the Kubeflow environment. Observed potential impact includes unauthorized reading of sensitive workload data and exposure of credentials stored within pipeline logs.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Kubeflow Pipelines to version 2.18.0 or later immediately.\u003c/li\u003e\n\u003cli\u003eEvaluate current network policies and authentication gates surrounding the Kubeflow API server to ensure requests are limited to trusted clients, as the API handler does not perform independent authentication.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-29T18:46:16Z","date_published":"2026-10-29T17:51:14Z","id":"https://feed.craftedsignal.io/briefs/2026-10-kubeflow-auth-bypass/","summary":"An authorization bypass in the Kubeflow Pipelines API server allows unauthenticated or unauthorized users to read sensitive logs by manipulating the GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log handler.","title":"Kubeflow Pipelines: API authorization bypass for log access (CVE-2026-118759)","url":"https://feed.craftedsignal.io/briefs/2026-10-kubeflow-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Kubeflow Pipelines (\u003c 2.18.0)","version":"https://jsonfeed.org/version/1.1"}