Back to the CVE list

CVE-2026-118758Suited to automated attack · CISA

Kubeflow: Unauthenticated path traversal to arbitrary file read on ml-pipeline-ui via the volume artifact source

CVSS score

7.5

EPSS probability

—

Risk score

0.8

Published

5 h ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

7.5

CVE-2026-118761Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory

Vendorkubeflow Productpipelines

Patch status unknown4 h ago

7.5

CVE-2026-118759Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant

Vendorkubeflow Productpipelines

Patch status unknown4 h ago

6.5

CVE-2026-118760Kubeflow Pipelines: Missing namespace authorization permits cross-tenant artifact reads

Vendorkubeflow Productpipelines

Patch status unknown4 h ago

10.0

CVE-2026-54745Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true

Vendorkubeflow Productpipelines

Patch status unknownEPSS %12 mo ago

7.1

CVE-2026-110220Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL Annotation

Vendorkubeflow ProductModel Registry

Patch status unknownEPSS %016 d ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-118758"

CVE-2026-118758 · Kubeflow: Unauthenticated path traversal…