Arbitrary Host Connection Issue in Kubeflow Pipelines by Kubeflow

CVE-2026-88981

What is CVE-2026-88981?

Kubeflow Pipelines, designed to facilitate the creation and deployment of scalable machine learning workflows, exhibits a vulnerability that allows unauthenticated users to connect the ml-pipeline-ui pod to arbitrary hosts. This can occur when utilizing the frontend artifact download path for certain storage sources, which improperly accept non-validated endpoint data. Additionally, requests made under this configuration may expose sensitive information, such as access-key identifiers, when using configured object store credentials. Multi-user secret-backed metadata remains protected within the server namespace. A fix has been issued in version 2.18.0.

References