CVE-2026-118758

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the volume artifact handler for GET /artifacts/get?source=volume did not confine a caller-supplied file path to the selected volume. A caller who can reach the route and identify an existing mounted volume can use path traversal to read files outside that volume when the artifact-serving process can read them. The frontend pod serves the request when artifact proxying is disabled, while the selected namespace's artifact-service pod serves it when proxying is enabled. A deployment with authentication disabled requires no application credentials; in multi-user deployments, the caller ordinarily must be authorized for the supplied namespace. This issue is fixed in version 2.18.0.

• CWE-22

• https://github.com/kubeflow/pipelines/blob/2.18.0/docs/operator-guides/upgrade-2.18.md#custom-storage-configuration-and-rollout
• https://github.com/kubeflow/pipelines/commit/4d9bc5ab12b67efedb3923ef428a399cb445cf5f
• https://github.com/kubeflow/pipelines/pull/13677
• https://github.com/kubeflow/pipelines/releases/tag/2.18.0
• https://github.com/kubeflow/pipelines/security/advisories/GHSA-2fg9-fx2f-439r

Published

Oct 29, 2026

Last Modified

Oct 30, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-118752FreeImage (danoli3 fork) before 3.19.22 contains a heap buff…7.8
• CVE-2026-118753FreeImage (danoli3 fork) before 3.19.25 contains a heap buff…7.8
• CVE-2026-118754Dolibarr ERP CRM before 24.0.2 contains a missing authorizat…5.3
• CVE-2026-118755Volmarg Personal Management System through 2.1.0 contains an…7.2
• CVE-2026-118756gopass before 1.17.0 contains a path traversal vulnerability…5.5
• CVE-2026-118757PiWeb Disable payment method / Partial payment for WooCommer…6.5
• CVE-2026-118759Kubeflow Pipelines enables users to build and deploy portabl…7.5
• CVE-2026-11876In zenml-io/zenml version 0.94.2, the `GET /api/v1/stack-dep…5
• CVE-2026-118760Kubeflow Pipelines enables users to build and deploy portabl…6.5
• CVE-2026-118761Kubeflow Pipelines enables users to build and deploy portabl…7.5
• CVE-2026-118762Monkeytype is a minimalistic and customizable typing test. P…9.3
• CVE-2026-118763sigstore-js provides JavaScript libraries for interacting wi…7.4