CVE-2026-88982

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to…

CVSS 3.1 · [email protected] · Secondary 5.4 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 9 Nov 2026 23:04:37 UTC. Read the latest advisory.

nvd · CVE-2026-88982

Published

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the legacy V1/raw-Argo execution cache mutating webhook and cache-server storage path hash selected template fields without the Kubernetes namespace, use the key alone for lookups and duplicate checks, and trust the mutable pipelines.kubeflow.org/execution_cache_key annotation when publishing outputs. In multi-user deployments where tenant namespaces share the cache service, a tenant with workload-submission privileges can read another namespace's cached outputs or seed matching outputs that are substituted into a later step. Standard KFP V2 component pods bypass this cache, matching requires the selected template fields and staleness policy, and arbitrary code execution or service availability impact is not established. This issue is fixed in version 2.18.0.

Read the publisher's advisory

Affected versions, risk and source history

nvd · CVE-2026-88982

Published

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the legacy V1/raw-Argo execution cache mutating webhook and cache-server storage path hash selected template fields without…

Additional publisher context

NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.

Source analysis status: Awaiting Analysis

Weakness classifications: CWE-345 · CWE-639

Original publisher date fields

published: 2026-11-05T23:17:01.600

lastModified: 2026-11-06T21:40:43.450

Source published: 5 Nov 2026 23:17:01 UTC
Source modified: 6 Nov 2026 21:40:43 UTC
Saved here: 9 Nov 2026 23:04:37 UTC
Source terms: NIST NVD usage terms; underlying source attribution retained

Original source record · Cite this exact observation · Complete original publisher JSON

Source: nvd · NIST NVD usage terms; underlying source attribution retained. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.

CVSS 3.1 · [email protected] · Secondary · 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N