Evidence · DiggingBeagle record
Kubeflow Pipelines security advisory GHSA-v83x-544f-ph2r
Independent Kubeflow Pipelines authorization or artifact handling disclosure.
- Published
- Oct 29, 2026
- Source role
- primary disclosure
Evidence record
Independent Kubeflow Pipelines authorization or artifact handling disclosure.
Claim-level citations (2)
- supportsKubeflow run creation revealed another tenant stored pipeline: The Kubeflow advisory reports: The API built a run or recurring run from a supplied known private pipeline identifier without consistently checking read authorization.
Advisory Summary and Proof of Concept
- supportsKubeflow run creation revealed another tenant stored pipeline: The reported repair is version 2.18.0, with the specific affected component and version range described in the advisory.
Advisory Affected and Patched Versions