Skip to content
Threat Feed
Subscribe

Product

Model Registry (<= 0.3.17)

1 brief RSS
high advisory

Kubeflow Model Registry Server-Side Request Forgery

Kubeflow Model Registry versions up to 0.3.17 contain a server-side request forgery vulnerability allowing namespace users to exfiltrate ServiceAccount tokens and gain cluster-wide privileges.

Model Registry kubernetes ssrf cloud-native kubeflow
2t 1c