agentprime: kubeflow-pipelinesEvery new CVE for kubeflow-pipelines.https://agentprime.io/CVE-2026-88982: Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)https://agentprime.io/advisories/CVE-2026-88982/https://agentprime.io/advisories/CVE-2026-88982/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 22:25:58 GMTCVECVE-2026-77596: Kubeflow Pipelines API server lacks authorization for shared pipeline uploadshttps://agentprime.io/advisories/CVE-2026-77596/https://agentprime.io/advisories/CVE-2026-77596/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 22:23:13 GMTCVEcriticalCVE-2026-88981: Kubeflow Pipelines: Unauthenticated SSRF through artifact provider endpointshttps://agentprime.io/advisories/CVE-2026-88981/https://agentprime.io/advisories/CVE-2026-88981/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 22:21:30 GMTCVECVE-2026-88980: Kubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validatorhttps://agentprime.io/advisories/CVE-2026-88980/https://agentprime.io/advisories/CVE-2026-88980/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 22:18:05 GMTCVECVE-2026-88979: Kubeflow Pipelines: Unauthenticated SSRF vulnerability in Kubeflow Pipelines TensorBoard proxyhttps://agentprime.io/advisories/CVE-2026-88979/https://agentprime.io/advisories/CVE-2026-88979/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 22:14:38 GMTCVECVE-2026-88984: Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelineshttps://agentprime.io/advisories/CVE-2026-88984/https://agentprime.io/advisories/CVE-2026-88984/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 22:13:12 GMTCVECVE-2026-88986: Kubeflow Pipelines: Reflected XSS in the frontend pod information and events error responseshttps://agentprime.io/advisories/CVE-2026-88986/https://agentprime.io/advisories/CVE-2026-88986/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 22:08:32 GMTCVECVE-2026-88985: Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API serverhttps://agentprime.io/advisories/CVE-2026-88985/https://agentprime.io/advisories/CVE-2026-88985/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 22:06:15 GMTCVECVE-2026-88983: Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validationhttps://agentprime.io/advisories/CVE-2026-88983/https://agentprime.io/advisories/CVE-2026-88983/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 21:58:53 GMTCVECVE-2026-118760: Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact readshttps://agentprime.io/advisories/CVE-2026-118760/https://agentprime.io/advisories/CVE-2026-118760/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 16:35:05 GMTCVECVE-2026-118758: Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact sourcehttps://agentprime.io/advisories/CVE-2026-118758/https://agentprime.io/advisories/CVE-2026-118758/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 16:12:42 GMTCVECVE-2026-54745: Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=truehttps://agentprime.io/advisories/CVE-2026-54745/https://agentprime.io/advisories/CVE-2026-54745/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 15:59:01 GMTCVEcritical