CVE-2026-118761

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives without adequately bounding expanded data while locating or reading the pipeline file. A small ZIP or gzip-compressed tar archive can consume disproportionately large memory and exhaust API-server resources. Multipart pipeline and pipeline-version upload processing performs decompression before namespace authorization, so a reachable caller does not need a successful pipeline-create authorization decision. URL-import handlers authorize before fetching and decompressing a remote archive. The amount of expansion required to interrupt service depends on deployment resource limits and concurrent activity, and no specific archive is guaranteed to crash every deployment. This issue is fixed in version 2.18.0.

• CWE-409

• https://github.com/kubeflow/pipelines/commit/1121d9a081fdf9e2107c39abb2cd8947727c6953
• https://github.com/kubeflow/pipelines/commit/ba9ae72cc860e3afbea232185e4132fc2896cac5
• https://github.com/kubeflow/pipelines/pull/14171
• https://github.com/kubeflow/pipelines/pull/14186
• https://github.com/kubeflow/pipelines/releases/tag/2.18.0
• https://github.com/kubeflow/pipelines/security/advisories/GHSA-8fmv-6rg5-5924

Published

Oct 29, 2026

Last Modified

Oct 30, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-118756gopass before 1.17.0 contains a path traversal vulnerability…5.5
• CVE-2026-118757PiWeb Disable payment method / Partial payment for WooCommer…6.5
• CVE-2026-118758Kubeflow Pipelines enables users to build and deploy portabl…7.5
• CVE-2026-118759Kubeflow Pipelines enables users to build and deploy portabl…7.5
• CVE-2026-11876In zenml-io/zenml version 0.94.2, the `GET /api/v1/stack-dep…5
• CVE-2026-118760Kubeflow Pipelines enables users to build and deploy portabl…6.5
• CVE-2026-118762Monkeytype is a minimalistic and customizable typing test. P…9.3
• CVE-2026-118763sigstore-js provides JavaScript libraries for interacting wi…7.4
• CVE-2026-118764minimatch is a minimal matching utility for converting glob …6.9
• CVE-2026-118765Botan is a C++ cryptography library. From 3.7.0 until 3.13.0…7.3
• CVE-2026-118766Botan is a C++ cryptography library. Prior to 3.13.0, Botan'…6.1
• CVE-2026-118767Botan is a C++ cryptography library. From 1.11.22 until 3.13…4.8