CVE-2026-54745: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0…

Summary

Kubeflow Pipelines versions before 2.17.0 have an unauthenticated server-side request forgery flaw in the frontend /_proxy/ route, implemented in frontend/server/proxy-middleware.ts. The _routePathWithReferer() function forwards requests to any attacker-chosen HTTP or HTTPS target without a host allowlist or filtering of loopback, link-local, RFC1918, or cluster-local addresses. The route bypasses authorization middleware when ENABLE_AUTHZ=true and can be reached through crafted Referer headers, letting an unauthenticated attacker read or modify internal services, including cloud metadata credentials and Kubernetes APIs.

Mitigation

Fixed in 2.17.0.

Related items

• MediumCVE-2026-122160: myshell-ai AIlice HuggingFace Model Wrapper untrusted model loadingSimilar attack · NVD/CVE Database
• MediumCVE-2026-122159: Edge0-AI Audio8_TTS path traversal via slow_decode_models argumentSimilar attack · NVD/CVE Database
• MediumCVE-2026-122235: Jan workspace guard bypass allows file writes outside workspace via symlinksSimilar attack · NVD/CVE Database
• HighCVE-2026-122135: Mistral Vibe remote code execution via repository gpg.program settingSimilar attack · NVD/CVE Database
• HighCVE-2026-122134: Mistral Vibe remote code execution through malicious Git filter driversSimilar attack · NVD/CVE Database