Skip to content
Threat Feed
Subscribe

Tag

Kubeflow

2 briefs RSS
high advisory

Kubeflow Model Registry Server-Side Request Forgery

Kubeflow Model Registry versions up to 0.3.17 contain a server-side request forgery vulnerability allowing namespace users to exfiltrate ServiceAccount tokens and gain cluster-wide privileges.

Model Registry kubernetes ssrf cloud-native kubeflow
2t 1c
high advisory

Improper Authorization in Data Science Pipelines (CVE-2026-18620)

An authorization bypass vulnerability in Data Science Pipelines allows restricted tenants to execute containers with elevated privileges by specifying a highly-privileged ServiceAccount in a CreateRun request.

Data Science Pipelines privilege-escalation kubeflow cloud-native
1t 1c