CVE-2026-88983

MEDIUM 5.0

Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation

CVSS Score

5.0

EPSS Score

0.0%

EPSS Percentile

0th

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server's pipeline and pipeline-version creation paths fetch a caller-supplied pipelineURL without restricting the destination. An authenticated caller with permission to create a pipeline or pipeline version can make requests from the API server to internal services and observe a limited status-code oracle. Arbitrary response-body disclosure, credential theft, and integrity or availability impact are not established. This issue is fixed in version 2.17.0.

CWE	CWE-441 CWE-918
Vendor	kubeflow
Product	pipelines
Published	Nov 5, 2026

Stay Ahead of the Next One

Get instant alerts for kubeflow pipelines

Be the first to know when new medium vulnerabilities affecting kubeflow pipelines are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

None

Availability

None

Affected Versions

kubeflow / pipelines

< 2.17.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/kubeflow/pipelines/security/advisories/GHSA-f7vj-6669-qvv4 github.com: https://github.com/kubeflow/pipelines/pull/12750 github.com: https://github.com/kubeflow/pipelines/commit/504d7797c1e061327ddb2bcb8bc1c5dd4940cfc3 github.com: https://github.com/kubeflow/pipelines/releases/tag/2.17.0