CVE-2026-88981: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0…

Summary

CVE-2026-88981 affects Kubeflow Pipelines before 2.18.0. The frontend artifact download path for source=s3 or source=minio, and the archived pod-log path, accept endpoint values from request or workflow metadata without checking them against operator-controlled storage configuration. In the shipped authorization-disabled standalone configuration, an unauthenticated caller can make the shared ml-pipeline-ui pod connect to arbitrary reachable hosts and return response data, and may reveal an access-key identifier when requests are signed with configured object-store credentials.

Mitigation

Fixed in version 2.18.0.

Related items

• MediumBinance heist is stark example of AI governance gaps and basic security failuresSimilar attack · CSO Online
• HighCVE-2026-123019: eosphoros-ai DB-GPT untrusted code inclusion via trust_remote_codeSimilar attack · NVD/CVE Database
• MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
• InfoA Bag of Tricks for Defending Deep Learning-based Face Recognition Pipelines against Backdoor AttacksSimilar attack · Arxiv (cs.RO + cs.CV security)
• InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog