Vulnerability · Published Nov 5, 2026 · Assigned by GitHub_M

CVE-2026-88985Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server

Medium 6.5

In plain English

A medium-severity SQL injection in pipelines from kubeflow. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.3%top 82.2% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server trusts structural SQL identifier fields decoded from the base64-encoded JSON page_token parameter before constructing list queries. An attacker who can invoke an affected pipeline or run list API can inject through KeyFieldName or SortByFieldName, including v1beta1 and v2beta1 run-listing metric paths, and read data available to the API server database account across namespaces. Database modification is not established. This issue is fixed in version 2.17.0.

Affected products (as reported)

Vendor	Product	Versions
kubeflow	pipelines	< 2.17.0

Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/kubeflow/pipelines/security/advisories/GHSA-r4mx-2gr2-8277 x_refsource_CONFIRM
https://github.com/kubeflow/pipelines/pull/13127 x_refsource_MISC
https://github.com/kubeflow/pipelines/commit/ac3a4c65677a3bc7a3d5b1e264fba41178d4ab32 x_refsource_MISC
https://github.com/kubeflow/pipelines/releases/tag/2.17.0 x_refsource_MISC