Evidence · DiggingBeagle record
Kubeflow Pipelines security advisory GHSA-2xwh-426q-42c5
Independent Kubeflow Pipelines authorization or artifact handling disclosure.
- Published
- Oct 28, 2026
- Source role
- primary disclosure
Evidence record
Independent Kubeflow Pipelines authorization or artifact handling disclosure.
Claim-level citations (2)
- supportsKubeflow cache reused other tenants outputs under a namespace-blind key: The Kubeflow advisory reports: The affected v2 cache server reuses execution results across namespaces if its cache hash and lookup context align.
Advisory Summary and Proof of Concept
- supportsKubeflow cache reused other tenants outputs under a namespace-blind key: The reported repair is version 2.18.0, with the specific affected component and version range described in the advisory.
Advisory Affected and Patched Versions