CVE-2026-77596
waiting for further signalsZero needs more public information before it can validate it.description
Kubeflow Pipelines API server versions before 2.18.0 can skip authorization for HTTP pipeline uploads targeting the shared empty namespace in multi-user deployments. A low-privilege tenant can create shared pipelines or add versions to existing shared pipelines; callers may be unauthenticated when the API server is exposed without an authenticating proxy. Exploitation requires access to the affected upload endpoints and an empty namespace path.
mitigation
Upgrade ghcr.io/kubeflow/kfp-api-server to version 2.18.0 or later. Until upgraded, require namespaces for pipeline operations and restrict the API server behind authenticated, authorized network access.
fixed in 2.18.0
outcome
Contextual, not validated: no deterministic check could cover this one, and no technique passed our review.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-28 03:57Zghsa: trigger signal, started the run
- 2026-10-28 03:57Z
this entry in the feed
GET /api/v1/feed/CVE-2026-77596
{ "etk_id": "ETK-2026-2939", "cve_id": "CVE-2026-77596", "display_id": "CVE-2026-77596", "ghsa_id": "GHSA-rjr3-43j3-4q8g", "euvd_id": null, "status": "published", "anchor_state": "awaiting_cve", "title": "Missing authorization in Kubeflow Pipelines API uploads", "summary": "Kubeflow Pipelines API server versions before 2.18.0 can skip authorization for HTTP pipeline uploads targeting the shared empty namespace in multi-user deployments. A low-privilege tenant can create shared pipelines or add versions to existing shared pipelines; callers may be unauthenticated when the API server is exposed without an authenticating proxy. Exploitation requires access to the affected upload endpoints and an empty namespace path.", "mitigation": "Upgrade ghcr.io/kubeflow/kfp-api-server to version 2.18.0 or later. Until upgraded, require namespaces for pipeline operations and restrict the API server behind authenticated, authorized network access.", "vendor": "other", "product": "other:ghcr.io/kubeflow/kfp-api-server", "affected": [ { "affected_notes": [], "affected_ranges": [ "<= 2.17.3" ], "ecosystem": "other", "fixed_versions": [ "2.18.0" ], "package_name": "ghcr.io/kubeflow/kfp-api-server", "purl": null } ], "cwes": [ 862 ], "cvss_score": 9.6, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "epss_score": null, "epss_percentile": null, "epss_asof": null, "automation": "contextual", "check": false, "check_confidence_basis": null, "exploit": false, "pipeline_minutes": 26.062983933333335, "t0_at": null, "signals": { "public_poc": { "at": "2026-10-28T03:57:56+00:00", "days": -1.105006189976852, "is_lower_bound": true, "measured_at": "2026-10-29T06:29:08.565585+00:00", "url": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-rjr3-43j3-4q8g" }, "trigger_signal": { "at": "2026-10-28T03:57:56+00:00", "days": -1.105006189976852, "is_lower_bound": true, "measured_at": "2026-10-29T06:29:08.565585+00:00", "url": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-rjr3-43j3-4q8g" } } }
published 2026-10-29 05:02Z
last change 2026-10-29 06:00Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.