CVE-2026-18608

Name of the Vulnerable Software and Affected Versions Data Science Pipelines Operator (affected versions not specified)

Description Data Science Pipelines Operator (DSPO) contains a flaw where its ClusterRole grants excessive privileges beyond what is required for its operation. These permissions include the ability to execute commands within pods and manage cluster-wide roles. If the DSPO pod is compromised, an attacker could use these privileges to obtain full administrative control over the Kubernetes cluster.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.