{"data":{"id":"57a6f51f-93c1-4443-8381-c7951a3a0348","title":"CVE-2026-77596: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0…","summary":"Kubeflow Pipelines versions before 2.18.0 have an authorization bypass in the multi-user endpoints POST /apis/v2beta1/pipelines/upload and POST /apis/v2beta1/pipelines/upload_version. When the target namespace is empty and REQUIRE_NAMESPACE_FOR_PIPELINES is at its default of false, canUploadVersionedPipeline returns without a SubjectAccessReview. A low-privilege tenant can thus create shared pipelines or inject versions into existing ones without write permission, and an unauthenticated caller can do the same if the API server is reachable without an authenticating proxy. An enabled unpinned recurring run that follows the latest version can then execute the injected specification in another tenant's namespace under that workload's service account.","solution":"Fixed in version 2.18.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-77596","publishedAt":"2026-11-05T23:17:00.767Z","cveId":"CVE-2026-77596","cweIds":["CWE-639","CWE-862"],"cvssScore":"9.6","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Kubeflow Pipelines"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Kubeflow Pipelines authorization bypass in pipeline upload endpoints","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-11-06T06:09:43.482Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-06T06:09:48.322Z","patchAvailable":null,"disclosureDate":"2026-11-05T23:17:00.767Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}