Kubeflow Pipelines shared upload authorization advisory

Evidence record

Read the original source ↗

Claim-level citations (3)

• supportsKubeflow HTTP uploads bypassed authorization for shared pipeline versions: Kubeflow's advisory identifies both HTTP multipart upload and upload_version endpoints, with an empty namespace default that skips SubjectAccessReview, including a possible unauthenticated caller where the API server is reachable.

  Summary and Description: HTTP multipart routes, canUploadVersionedPipeline and empty namespace authorization

• supportsKubeflow HTTP uploads bypassed authorization for shared pipeline versions: Kubeflow Pipelines 2.18.0 contains the reported authorization repair for affected releases through 2.17.3.

  GHSA-rjr3-43j3-4q8g, Affected versions and Patched versions

• supportsKubeflow HTTP uploads bypassed authorization for shared pipeline versions: The upload_version path omitted the normal Kubernetes SubjectAccessReview when the target namespace was empty, which identified a shared pipeline in the affected configuration.

  GHSA-rjr3-43j3-4q8g, Description and Root Cause