CVE-2026-88985
Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server trusts structural SQL identifier fields decoded from the base64-encoded JSON page_token parameter before constructing list queries. An attacker who can invoke an affected pipeline or run list API can inject through KeyFieldName or SortByFieldName, including v1beta1 and v2beta1 run-listing metric paths, and read data available to the API server database account across namespaces. Database modification is not established. This issue is fixed in version 2.17.0.
| CWE | CWE-89 |
| Vendor | kubeflow |
| Product | pipelines |
| Published | Nov 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for kubeflow pipelines
Be the first to know when new medium vulnerabilities affecting kubeflow pipelines are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
kubeflow / pipelines
< 2.17.0
References
github.com: https://github.com/kubeflow/pipelines/security/advisories/GHSA-r4mx-2gr2-8277 github.com: https://github.com/kubeflow/pipelines/pull/13127 github.com: https://github.com/kubeflow/pipelines/commit/ac3a4c65677a3bc7a3d5b1e264fba41178d4ab32 github.com: https://github.com/kubeflow/pipelines/releases/tag/2.17.0