Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-118759— Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant

Quick assessment

Affected
kubeflow pipelines
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Kubeflow Pipelines 允许用户构建和部署可移植、可扩展的机器学习工作流。在 2.18.0 版本之前，API 服务器的 处理程序在获取日志时，未对调用者针对所选运行（run）进行授权验证。任何能够访问后端、且知晓目标运行 ID 以及合适的 Pod 或节点标识符的攻击者，均可利用 API 服务器的权限读取实时或归档日志。对于实时日志，该处理程序将调用者控制的节点 ID 直接作为 Pod 名称接受，而未验证该 Pod 是否属于所请求的运行；这使得攻击者可利用已知的运行 ID 选择无关 Pod 所在的命名空

CVSS 7.5 · High

Affected Version Matrix 1

VendorProduct Version RangeStatus
kubeflow pipelines < 2.18.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-118759

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant
Source: CVE Program / CVE List V5
Vulnerability Description
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log handler retrieved logs without authorizing the caller against the selected run. A caller who can reach the backend and knows a victim run ID and suitable pod or node identifier can read live or archived logs with the API server's permissions. For live logs, the caller-controlled node ID was also accepted as a pod name without verifying that the pod belonged to the requested run, allowing a known run ID to select the namespace of an unrelated pod and read its main container logs. The handler does not authenticate requests itself, although an external authentication gate or network policy can limit reachability. Exposed logs can contain sensitive workload data or credentials. This issue is fixed in version 2.18.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
kubeflow pipelines < 2.18.0 -

II. Public POCs for CVE-2026-118759

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-118759

请登录查看更多情报信息。

Other References for CVE-2026-118759 (4)

Same Patch Batch · kubeflow · 2026-10-29 · 4 CVEs total

CVE-2026-118758 7.5 HIGH Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the
CVE-2026-118761 7.5 HIGH Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server me
CVE-2026-118760 6.5 MEDIUM Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact reads

IV. Related Vulnerabilities

Same product: pipelines
Same vendor: kubeflow
Same weakness: CWE-200