CVE-2026-118761

Name of the Vulnerable Software and Affected Versions Kubeflow Pipelines versions prior to 2.18.0

Description The API server decompresses uploaded pipeline archives without properly bounding the expanded data during the process of locating or reading the pipeline file. This can allow a small ZIP or gzip-compressed tar archive to consume excessive memory, leading to the exhaustion of API server resources. In multipart pipeline and pipeline-version upload processing, decompression occurs before namespace authorization, meaning a caller can trigger this issue without needing pipeline-create authorization. Conversely, URL-import handlers perform authorization before fetching and decompressing remote archives.

Recommendations Update to version 2.18.0.