Server-Side Request Forgery in Kubeflow Model Registry by Kubeflow

CVE-2026-110220

What is CVE-2026-110220?

The Kubeflow Model Registry, up to version 0.3.17, is affected by a server-side request forgery vulnerability. This issue allows namespace users to exploit the modelregistry.kubeflow.org/url annotation to capture the controller ServiceAccount token. By creating an InferenceService that directs this annotation to their server, attackers can intercept sensitive tokens and potentially modify other tenants' InferenceServices across the cluster, posing a serious security threat.

References