CVE-2026-88979: Kubeflow Pipelines TensorBoard proxy forgeable token via default HMAC secret

Summary

Kubeflow Pipelines versions 2.17.0 through 2.18.0 use MINIO_SECRET_KEY as the HMAC secret for the TensorBoard proxy token, and that key's bundled default is publicly known. In deployments with authorization disabled that keep the default, an unauthenticated attacker can forge a token with a chosen viewerName and namespace and read responses from the matching TensorBoard service on port 80 under /tensorboard/<viewer>/. Resource-name validation and path-traversal rejection remain enforced, and the source does not establish unrestricted metadata access, writes, or service disruption.

Mitigation

This issue is fixed in version 2.18.0.

Related items

• MediumResearchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User InteractionSimilar attack · The Hacker News
• MediumChatGPT Lockdown Mode Bypass: Phishing, Malware Delivery, and Silent Data ExfiltrationSimilar attack · Check Point Research
• MediumTop AI agent security resources — November 2026Similar attack · Adversa AI Blog
• MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
• InfoAddition by Subtraction: Toward Mitigating Fragile Safety Alignment in Large Language ModelsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)