{"id":"CVE-2026-111672","kind":"vulnerability","aliases":["CVE-2026-111672"],"related":[],"title":"Cube-studio: missing authorization lets users view or copy other groups' pipelines","description":"Cube-studio through 2026.09.01 contains a missing authorization vulnerability in myapp/views/view_pipeline.py that allows authenticated users to view or copy other project groups' pipelines by id. Attackers can enumerate sequential pipeline ids via the web, log, monitoring, pod, and copy_pipeline endpoints to expose DAGs, cluster names, namespaces, Argo workflow ids, and pod names, or clone pipelines.","summary":"Cube-studio's pipeline views do not check project group ownership, so any logged-in user can open pipelines by id that belong to other groups. An attacker can enumerate sequential ids to read DAGs, cluster names, namespaces, Argo workflow ids and pod names, or clone other teams' pipelines.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cube-studio","kubernetes","multi-tenant","other","self-hosted"],"not_affected_if":["no-untrusted-accounts","single-group-instance"],"how_to_check":"- Check the installed Cube-studio version against the release line; the flaw is described as present through `2026.09.01`\n- Confirm whether the deployment has multiple project groups sharing one instance (unknown from sources how to inspect this)","fix":"- Move Cube-studio past `2026.09.01` once a fixed release is published (fixed version: unknown from sources)\n- Until then, limit instance accounts to a single trusted group and review access to pipeline ids","status":"open","published_at":"2026-10-16T18:17:49+00:00","first_seen_at":"2026-10-23T21:57:13+00:00","triaged_at":"2026-10-25T04:27:06+00:00","updated_at":"2026-10-25T04:27:06+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-25T04:27:06Z","model":"claude-haiku-5-5","output":{"fix":"- Move Cube-studio past `2026.09.01` once a fixed release is published (fixed version: unknown from sources)\n- Until then, limit instance accounts to a single trusted group and review access to pipeline ids","reach":"internet","title":"Cube-studio: missing authorization lets users view or copy other groups' pipelines","impact":"medium","summary":"Cube-studio's pipeline views do not check project group ownership, so any logged-in user can open pipelines by id that belong to other groups. An attacker can enumerate sequential ids to read DAGs, cluster names, namespaces, Argo workflow ids and pod names, or clone other teams' pipelines.","category":"other","nicknames":[],"who_cares":["cube-studio","kubernetes","self-hosted","multi-tenant"],"confidence":0.6,"needs_auth":"yes","worst_case":"Other groups' pipeline definitions and cluster details are readable and cloneable","analyst_note":"Find the fixed Cube-studio version and the advisory or commit for myapp/views/view_pipeline.py from the NVD entry.","how_to_check":"- Check the installed Cube-studio version against the release line; the flaw is described as present through `2026.09.01`\n- Confirm whether the deployment has multiple project groups sharing one instance (unknown from sources how to inspect this)","needs_analyst":true,"not_affected_if":["single-group-instance","no-untrusted-accounts"],"who_is_affected":"Teams running Cube-studio where several project groups or tenants share one instance and any user can log in. Single-team instances where every account belongs to the same trusted group face little added exposure from this flaw. Sources do not say which configurations are most exposed.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000648,"input_tokens":3377,"output_tokens":620,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-111672':16A,19A '-2026':15A,18A '2026.09.01':86C 'allow':95C 'argo':71B,130C 'attack':60B,108C 'authent':96C 'author':5A,90C 'belong':55B 'check':39B 'clone':78B,137C 'cluster':68B,127C 'contain':87C 'copi':10A,101C,121C 'cube':2A,21B,32B,83C 'cube-studio':1A,20B,31B,82C 'cve':14A,17A 'dag':67B,126C 'endpoint':123C 'enumer':62B,110C 'expos':125C 'group':12A,41B,58B,104C 'host':30B 'id':53B,64B,73B,107C,113C,132C 'kubernet':23B 'let':6A 'log':46B,117C 'logged-in':45B 'miss':4A,89C 'monitor':118C 'multi':25B 'multi-ten':24B 'myapp/views/view_pipeline.py':93C 'name':69B,76B,128C,135C 'namespac':70B,129C 'open':50B 'ownership':42B 'pipelin':13A,35B,51B,81B,105C,112C,122C,138C 'pod':75B,119C,134C 'project':40B,103C 'read':66B 'self':29B 'self-host':28B 'sequenti':63B,111C 'studio':3A,22B,33B,84C 'team':80B 'tenant':26B 'user':7A,48B,97C 'via':114C 'view':8A,36B,99C 'vulner':91C 'web':116C 'workflow':72B,131C","nicknames":[],"mitigations":[],"who_affected":"Teams running Cube-studio where several project groups or tenants share one instance and any user can log in. Single-team instances where every account belongs to the same trusted group face little added exposure from this flaw. Sources do not say which configurations are most exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-16T18:17:49+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111672","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111672","severity":null,"published_at":"2026-10-16T18:17:49+00:00","modified_at":"2026-10-16T19:17:04+00:00","first_seen_at":"2026-10-23T21:57:13+00:00","fetched_at":"2026-10-23T22:28:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}