CVE-2026-88979

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 2.17.0 until 2.18.0, the TensorBoard proxy token introduced by the incomplete remediation for CVE-2026-54745 uses MINIO_SECRET_KEY as its HMAC secret, whose bundled default is publicly known. In an authorization-disabled deployment using that default, an unauthenticated attacker can forge a token containing a chosen viewerName and namespace; the proxy constructs the destination from the viewerName plus the -service suffix, the namespace, and the configured cluster domain, then reads responses on port 80 under the /tensorboard/<viewer>/ path. Resource-name validation and path-traversal rejection remain enforced, authorization-enabled deployments still check access to the selected namespace, and unrestricted metadata access, writes, or service disruption are not established. This issue is fixed in version 2.18.0.

• CWE-798
• CWE-918

• https://github.com/kubeflow/pipelines/commit/c8effaed62476a8d8c99d3a6cfdd404a04ef99d8
• https://github.com/kubeflow/pipelines/pull/14346
• https://github.com/kubeflow/pipelines/releases/tag/2.18.0
• https://github.com/kubeflow/pipelines/security/advisories/GHSA-j429-j7xw-8j9h
• https://github.com/kubeflow/pipelines/security/advisories/GHSA-j429-j7xw-8j9h

Published

Nov 5, 2026

Last Modified

Nov 6, 2026

Status

Awaiting Analysis

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-88968Claude Code is an agentic coding tool. Prior to 2.1.251, the…7.7
• CVE-2026-8897The Shortcode Buddy plugin for WordPress is vulnerable to St…6.4
• CVE-2026-88974WPGraphQL provides a GraphQL API for WordPress sites. Prior …5.4
• CVE-2026-88975Http4s is a Scala interface for HTTP services. Prior to 0.23…7.5
• CVE-2026-88976Plate is a rich-text editor with AI and shadcn/ui. Prior to …6.1
• CVE-2026-88978Hatchet is a platform for orchestrating background tasks, AI…4.3
• CVE-2026-8898The Events In City plugin for WordPress is vulnerable to Sto…6.4
• CVE-2026-88980Kubeflow Pipelines enables users to build and deploy portabl…8.6
• CVE-2026-88981Kubeflow Pipelines enables users to build and deploy portabl…8.6
• CVE-2026-88982Kubeflow Pipelines enables users to build and deploy portabl…5.4
• CVE-2026-88983Kubeflow Pipelines enables users to build and deploy portabl…5
• CVE-2026-88984Kubeflow Pipelines enables users to build and deploy portabl…7.2