CVE-2026-88986: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.15.0…

Summary

Kubeflow Pipelines versions prior to 2.15.0 have a flaw in the frontend routes /pipeline/k8s/pod and /pipeline/k8s/pod/events, where the podname and podnamespace query values and backend error details are included in HTML-capable error responses through frontend/server/k8s-helper.ts. An unauthenticated attacker can craft a link that runs JavaScript in the frontend origin when an authenticated user who meets the deployment's route-access requirements follows it. Cookie disclosure depends on cookie attributes, and server-side code execution or availability impact is not established.

Mitigation

Fixed in version 2.15.0.

Related items

• MediumThreat actors use agentic AI tooling to find and abuse exposed secretsSimilar attack · Microsoft Security Blog
• HighCVE-2026-88980: Kubeflow Pipelines artifact fetch flaw enables server-side request forgerySimilar attack · NVD/CVE Database
• CriticalCVE-2026-77596: Kubeflow Pipelines authorization bypass in pipeline upload endpointsSimilar attack · NVD/CVE Database
• HighCVE-2026-113663: AG2 SandboxShellTool command injection via newline separatorsSimilar attack · NVD/CVE Database
• MediumCVE-2026-88985: Kubeflow Pipelines SQL injection through page_token list API fieldsSimilar attack · NVD/CVE Database