Vulnerability · Published Nov 5, 2026 · Assigned by GitHub_M

CVE-2026-88983Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation

Medium 5.0

In plain English

A medium-severity server-side request forgery in pipelines from kubeflow. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).

Severity (CVSS 3.1)5.0Medium

Exploit odds (30 days)0.2%top 90.2% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server's pipeline and pipeline-version creation paths fetch a caller-supplied pipelineURL without restricting the destination. An authenticated caller with permission to create a pipeline or pipeline version can make requests from the API server to internal services and observe a limited status-code oracle. Arbitrary response-body disclosure, credential theft, and integrity or availability impact are not established. This issue is fixed in version 2.17.0.

Affected products (as reported)

Vendor	Product	Versions
kubeflow	pipelines	< 2.17.0

Weakness: CWE-441, CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

References

https://github.com/kubeflow/pipelines/security/advisories/GHSA-f7vj-6669-qvv4 x_refsource_CONFIRM
https://github.com/kubeflow/pipelines/pull/12750 x_refsource_MISC
https://github.com/kubeflow/pipelines/commit/504d7797c1e061327ddb2bcb8bc1c5dd4940cfc3 x_refsource_MISC
https://github.com/kubeflow/pipelines/releases/tag/2.17.0 x_refsource_MISC