CVE-2026-88983: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0…

Summary

Kubeflow Pipelines versions prior to 2.17.0 have an SSRF flaw in the API server's pipeline and pipeline-version creation paths, which fetch a caller-supplied pipelineURL without restricting the destination. An authenticated caller allowed to create pipelines or pipeline versions can reach internal services from the API server and observe a limited status-code oracle. Arbitrary response-body disclosure, credential theft, and integrity or availability impact are not established.

Mitigation

Fixed in version 2.17.0.

Related items

• MediumThreat actors use agentic AI tooling to find and abuse exposed secretsSimilar attack · Microsoft Security Blog
• HighCVE-2026-88980: Kubeflow Pipelines artifact fetch flaw enables server-side request forgerySimilar attack · NVD/CVE Database
• CriticalCVE-2026-77596: Kubeflow Pipelines authorization bypass in pipeline upload endpointsSimilar attack · NVD/CVE Database
• HighCVE-2026-113663: AG2 SandboxShellTool command injection via newline separatorsSimilar attack · NVD/CVE Database
• MediumCVE-2026-88986: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.15.0…Similar attack · NVD/CVE Database