Data Science Pipelines Operator Vulnerability in MariaDB and MinIO

CVE-2026-18611

What is CVE-2026-18611?

A vulnerability in the Data Science Pipelines Operator allows unauthenticated attackers to exploit weak cryptographic practices used in credential generation. This flaw enables potential access to sensitive credentials, including MariaDB root/user passwords and MinIO access/secret keys, if the attacker can access the MinIO route or MariaDB service. By leveraging this weakness, attackers could gain unauthorized access to critical pipeline artifacts and metadata, posing a significant risk of information disclosure.

References