Exploited: 178
LatestCVE-2026-107492 — Improper Authentication in the jwt_authn HTTP filter in envoyproxy envoy versions up to and including 1.38.0 allows an unauthenticated attacker to byp
VulnFeed.org
AREN

kubeflow pipelines vulnerabilities and fixes

Exploited and high-severity kubeflow pipelines vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 8.6CVE-2026-88980Kubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validatorVerify fixkubeflow pipelines
    1 min read
  2. 7.2CVE-2026-88984Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelinesCloudVerify fixkubeflow pipelines
    1 min read
  3. 9.6CVE-2026-77596Kubeflow Pipelines API server lacks authorization for shared pipeline uploadsVerify fixkubeflow pipelines
    1 min read
  4. 8.6CVE-2026-88981Kubeflow Pipelines: Unauthenticated SSRF through artifact provider endpointsVerify fixkubeflow pipelines
    1 min read
Esc