Read the docs
TI-2026-82673 Aliases CVE-2026-118759GHSA-wg5q-x4j9-qm54

Missing authorization in Kubeflow Pipelines exposes run pod logs

Priority LOW 39CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure, Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Partial Red Hat: 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-200 and CWE-862.

Summary

Kubeflow Pipelines before 2.18.0 has a missing authorization flaw (CWE-862) in its run log endpoint. The handler returns logs without checking the caller's access to the run. An attacker who can reach the backend and knows a run ID and pod or node identifier can read live or archived logs with the API server's permissions. The handler does not authenticate requests, though an external gate or network policy can limit reachability.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

Description from the CNA

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log handler retrieved logs without authorizing the caller against the selected run. A caller who can reach the backend and knows a victim run ID and suitable pod or node identifier can read live or archived logs with the API server's permissions. For live logs, the caller-controlled node ID was also accepted as a pod name without verifying that the pod belonged to the requested run, allowing a known run ID to select the namespace of an unrelated pod and read its main container logs. The handler does not authenticate requests itself, although an external authentication gate or network policy can limit reachability. Exposed logs can contain sensitive workload data or credentials. This issue is fixed in version 2.18.0.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00336 27th percentileScored 2026-11-07
Fix Partial pipelines (kubeflow): 2.18.0github.com/kubeflow/pipelines (Go): 0.0.0-20260904182349-be4723e33727Red Hat: 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
kubeflowpipelinesbefore 2.18.02.18.0Patch availableCNA
—github.com/kubeflow/pipelines (Go)before 0.0.0-20260904182349-be4723e337270.0.0-20260904182349-be4723e33727Patch availableGHSA-wg5q-x4j9-qm54
—github.com/kubeflow/pipelines (Go)——No fix listedGHSA-wg5q-x4j9-qm54
  • pipelines Vendorkubeflow Affected before 2.18.0 Fixed in 2.18.0 Patch available CNA
  • github.com/kubeflow/pipelines (Go) Vendor— Affected before 0.0.0-20260904182349-be4723e33727 Fixed in 0.0.0-20260904182349-be4723e33727 Patch available GHSA-wg5q-x4j9-qm54
  • github.com/kubeflow/pipelines (Go) Vendor— Affected — Fixed in — No fix listed GHSA-wg5q-x4j9-qm54

Remediation

Upgrade Kubeflow Pipelines to version 2.18.0 or later. The Go module github.com/kubeflow/pipelines is fixed in 0.0.0-20260904182349-be4723e33727. Red Hat lists Red Hat OpenShift AI (RHOAI) as affected without a fix, and no plan is available.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

  • Fix · CNA pipelines (kubeflow) Fixed in 2.18.0
  • Fix · GHSA-wg5q-x4j9-qm54 github.com/kubeflow/pipelines (Go) Fixed in 0.0.0-20260904182349-be4723e33727 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet

Timeline

  1. 2026-10-29 Threatist record created from CVE-2026-118759
  2. 2026-10-30 CISA SSVC decision points changed
  3. 2026-10-30 Priority changed: MEDIUM → LOW
  4. 2026-10-30 Alias added: GHSA-wg5q-x4j9-qm54
  5. 2026-10-30 Fix available: Go/github.com/kubeflow/[email protected] · GHSA-wg5q-x4j9-qm54
  6. 2026-10-30 CVSS score added · GHSA-wg5q-x4j9-qm54
  7. 2026-10-30 Weakness changed · GHSA-wg5q-x4j9-qm54
  8. 2026-10-30 6 new references · GHSA-wg5q-x4j9-qm54
  9. 2026-11-02 Affected versions changed · Red Hat
  10. 2026-11-02 CVSS score added · Red Hat

References

Advisory 1

Other 5

  • TI-2026-39556 Improper access control in kubeflow pipelines CVSS 3.1CRITICAL 10.0
  • TI-2024-05160 ReDoS in kubeflow/kubeflow CVSS 3.1HIGH 7.5
  • TI-2026-34822 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing CVSS 3.1HIGH 8.0
  • TI-2026-85696 Server-side request forgery in Kubeflow Pipelines TensorBoard proxy CVSS 3.1MEDIUM 5.8
  • TI-2026-73437 Server-side request forgery in Kubeflow Model Registry leaks tokens CVSS 4.0HIGH 7.1
  • TI-2026-85698 Server-side request forgery in Kubeflow Pipelines artifact endpoints CVSS 3.1HIGH 8.6
See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences