Six vulnerabilities disclosed in Kubeflow Pipelines, including a critical missing-authorization flaw

GitHub's Advisory Database published six new security advisories for Kubeflow Pipelines, the Kubernetes native platform for orchestrating multi-tenant ML/AI workflows, on November 9, 2026. The most severe is a critical, CVSS 9.6 missing-authorization flaw in shared-pipeline uploads, published as the GitHub Security Advisories disclosure of CVE-2026-77596.

What the six advisories cover

• GHSA-rjr3-43j3-4q8g / CVE-2026-77596: missing authorization on shared-pipeline multipart uploads, rated Critical with a CVSS score of 9.6
• GHSA-ghgh-57qv-h687 / CVE-2026-88984: an RBAC bypass that lets any authenticated user delete or modify global pipelines, rated High with a CVSS score of 7.2
• GHSA-r4mx-2gr2-8277 / CVE-2026-88985: SQL injection via pagination tokens, rated Medium with a CVSS score of 6.5
• GHSA-g3qx-frcg-j979 / CVE-2026-88986: reflected XSS in pod and events error pages, rated Medium with a CVSS score of 6.1
• GHSA-2xwh-426q-42c5 / CVE-2026-88982: cross-tenant execution-cache poisoning, rated Medium with a CVSS score of 5.4
• GHSA-f7vj-6669-qvv4 / CVE-2026-88983: server-side request forgery via an unvalidated pipelineURL parameter, rated Medium with a CVSS score of 5.0

Why it matters for AI builders

Kubeflow Pipelines underpins many multi-tenant ML/AI training and deployment setups, so the critical flaw is a direct risk for teams running shared AI infrastructure: a user without proper authorization could reach pipelines meant for other tenants through the shared-upload path. The RBAC bypass and execution-cache poisoning issues add further ways one tenant's workflow could affect another's, which matters most for organizations that run Kubeflow Pipelines as shared infrastructure across teams.

Fixes and where to find details

Fixes for the six issues are spread across Kubeflow Pipelines versions 2.15.0 through 2.18.0. Each advisory, including the RBAC bypass disclosure, lists the exact module, github.com/kubeflow/pipelines, and the patched release for that specific vulnerability.

Sources

• Kubeflow Pipelines missing authorization on shared pipeline uploads (CVE-2026-77596) (GitHub Security Advisories, November 9, 2026, official)
• Kubeflow Pipelines RBAC bypass (CVE-2026-88984) (GitHub Security Advisories, November 9, 2026, official)

Written with AI assistance, strictly from the sources listed above. Before it went live, automated checks verified its dates, sources and every language edition.