Authorization Flaw in Kubeflow Pipelines Affects User Data Access

CVE-2026-118760

What is CVE-2026-118760?

Kubeflow Pipelines allows users to create scalable machine learning workflows but contains an authorization flaw affecting versions from 0.5.1 to 2.17.0. Authenticated users can access unauthorized namespaces, leading to potential exposure of sensitive artifact contents, such as datasets and models. This issue arises in multi-user deployment scenarios where tenant isolation relies on the authorization feature of Kubeflow Pipelines. While authentication at ingress identifies users, it fails to adequately authorize access to selected artifact namespaces. As a result, users may access data belonging to other tenants or unprotected handlers. This vulnerability has been addressed in version 2.17.0.

References