CVE-2026-77596

Name of the Vulnerable Software and Affected Versions Kubeflow Pipelines versions prior to 2.18.0

Description An issue exists in the multi-user HTTP endpoints 'POST /apis/v2beta1/pipelines/upload' and 'POST /apis/v2beta1/pipelines/upload version' where the canUploadVersionedPipeline() function fails to perform a SubjectAccessReview when the target namespace is empty and REQUIRE NAMESPACE FOR PIPELINES is set to false. This allows a low-privilege tenant to create shared pipelines or inject malicious versions into existing shared pipelines without the necessary write permissions. If the API server is accessible without an authenticating proxy, unauthenticated users can also exploit this bypass. Consequently, an enabled unpinned recurring run that tracks the latest version may execute the injected specification within another tenant's namespace using that workload's service account.

Recommendations Update to version 2.18.0.