CVE-2026-118759

Name of the Vulnerable Software and Affected Versions Kubeflow Pipelines versions prior to 2.18.0

Description The API server fails to authorize callers when retrieving logs via the 'GET /apis/v1alpha1/runs/{run id}/nodes/{node id}/log' endpoint. An attacker with backend access who knows a victim run id and a valid node id can read live or archived logs using the API server's permissions. In the case of live logs, the node id is accepted as a pod name without verifying its association with the requested run, potentially allowing the reading of main container logs from unrelated pods within the selected namespace. The handler lacks internal authentication, relying on external gates or network policies for access control. This may lead to the exposure of sensitive workload data or credentials.

Recommendations Update to version 2.18.0.