CVE-2026-18617

Name of the Vulnerable Software and Affected Versions Data Science Pipelines Operator (affected versions not specified)

Description A flaw exists in the Data Science Pipelines Operator where a namespace editor can inject dangerous parameters into the MySQL Data Source Name (DSN) string via the spec.database.customExtraParams field. This allows the attacker to enable LOCAL INFILE functionality, which is a MySQL feature that allows a client to read local files and send them to the server. By exploiting this, an attacker can exfiltrate sensitive files, such as the service account token, from the operator pod, potentially leading to privilege escalation to cluster-admin status.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict the use of the spec.database.customExtraParams field to minimize the risk of exploitation.