CVE-2026-88985: Kubeflow Pipelines SQL injection through page_token list API fields

Summary

CVE-2026-88985 affects Kubeflow Pipelines before 2.17.0. The API server trusts SQL identifier fields (KeyFieldName, SortByFieldName) decoded from the base64-encoded JSON page_token parameter before building list queries, including v1beta1 and v2beta1 run-listing metric paths. An attacker who can invoke an affected pipeline or run list API can inject into these fields and read data available to the API server database account across namespaces; database modification is not established.

Mitigation

Fixed in 2.17.0.

Related items

• MediumThreat actors use agentic AI tooling to find and abuse exposed secretsSimilar attack · Microsoft Security Blog
• HighCVE-2026-88980: Kubeflow Pipelines artifact fetch flaw enables server-side request forgerySimilar attack · NVD/CVE Database
• CriticalCVE-2026-77596: Kubeflow Pipelines authorization bypass in pipeline upload endpointsSimilar attack · NVD/CVE Database
• HighCVE-2026-113663: AG2 SandboxShellTool command injection via newline separatorsSimilar attack · NVD/CVE Database
• MediumCVE-2026-88986: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.15.0…Similar attack · NVD/CVE Database