CVE-2026-118758

Name of the Vulnerable Software and Affected Versions Kubeflow Pipelines versions prior to 2.18.0

Description The volume artifact handler fails to properly confine caller-supplied file paths to the selected volume. An attacker with access to the route and knowledge of a mounted volume can employ path traversal to read files outside the intended volume, provided the artifact-serving process has the necessary read permissions. Depending on the configuration, requests are served by the frontend pod if artifact proxying is disabled, or by the artifact-service pod of the selected namespace if proxying is enabled. In deployments where authentication is disabled, no credentials are required; otherwise, the caller must be authorized for the specified namespace.

Recommendations Update to version 2.18.0. Avoid using the source=volume parameter in the 'GET /artifacts/get' endpoint until the update is applied.