Skip to content
Threat Feed
Subscribe

Vendor

Kubeflow

1 brief RSS
high advisory

Improper Authorization in Data Science Pipelines (CVE-2026-18620)

An authorization bypass vulnerability in Data Science Pipelines allows restricted tenants to execute containers with elevated privileges by specifying a highly-privileged ServiceAccount in a CreateRun request.

Data Science Pipelines privilege-escalation kubeflow cloud-native
1t 1c