CVE-2026-88981

{
  "etk_id": "ETK-2026-3676",
  "cve_id": "CVE-2026-88981",
  "display_id": "CVE-2026-88981",
  "ghsa_id": "GHSA-3pcj-8j5w-jmxq",
  "euvd_id": "EUVD-2026-117829",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated server-side request forgery in Kubeflow Pipelines",
  "summary": "Kubeflow Pipelines before 2.18.0 can let callers influence S3-compatible endpoints used by artifact downloads and archived pod-log retrieval. In the authorization-disabled standalone configuration, an unauthenticated attacker may cause the shared UI pod to send requests to reachable hosts and return response data. Exposure requires access to the affected frontend paths.",
  "mitigation": "Upgrade the pipelines package to version 2.18.0 or later. Until upgraded, disable or restrict unauthenticated access to the Kubeflow Pipelines frontend and limit its network access to approved object-storage endpoints.",
  "vendor": "kubeflow",
  "product": "pipelines",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 2.17.3"
      ],
      "ecosystem": "other",
      "fixed_versions": [
        "2.18.0"
      ],
      "package_name": "ghcr.io/kubeflow/kfp-frontend",
      "purl": null
    }
  ],
  "cwes": [
    918
  ],
  "cvss_score": 8.6,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 26.523132166666667,
  "t0_at": "2026-11-05T22:21:30.033000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-05T22:21:30.033000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-05T22:21:30.033000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88981"
    }
  }
}