{"data":{"id":"6996e8d8-7945-464d-84be-ddc402bfee0d","title":"CVE-2026-118760: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until…","summary":"Kubeflow Pipelines versions from 0.5.1 through 2.17.0 have frontend artifact routes that do not verify whether an authenticated user may access the requested namespace. A user who can reach the frontend and knows an artifact location can read another tenant's datasets, models, or pipeline outputs by selecting that namespace or omitting it to reach an unguarded direct handler. The flaw affects multi-user deployments relying on Kubeflow Pipelines for tenant isolation, and the source states it does not establish arbitrary Kubernetes Secret disclosure, storage modification, or server-side code execution.","solution":"Fixed in version 2.17.0.","labels":["security","industry"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-118760","publishedAt":"2026-10-29T17:18:06.770Z","cveId":"CVE-2026-118760","cweIds":["CWE-639","CWE-862"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Kubeflow Pipelines"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Kubeflow Pipelines artifact routes allow cross-namespace artifact reads","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-29T18:11:22.671Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T18:11:25.612Z","patchAvailable":null,"disclosureDate":"2026-10-29T17:18:06.770Z","capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}