---
id: "CVE-2026-111672"
kind: "vulnerability"
aliases: ["CVE-2026-111672"]
title: "Cube-studio: missing authorization lets users view or copy other groups' pipelines"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["cube-studio", "kubernetes", "multi-tenant", "other", "self-hosted"]
not_affected_if: ["no-untrusted-accounts", "single-group-instance"]
published_at: "2026-10-16T18:17:49+00:00"
first_seen_at: "2026-10-23T21:57:13+00:00"
updated_at: "2026-10-25T04:27:06+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111672", "first_seen_at": "2026-10-23T21:57:13+00:00"}]
---

# Cube-studio: missing authorization lets users view or copy other groups' pipelines

Cube-studio's pipeline views do not check project group ownership, so any logged-in user can open pipelines by id that belong to other groups. An attacker can enumerate sequential ids to read DAGs, cluster names, namespaces, Argo workflow ids and pod names, or clone other teams' pipelines.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Cube-studio version against the release line; the flaw is described as present through `2026.09.01`
- Confirm whether the deployment has multiple project groups sharing one instance (unknown from sources how to inspect this)

## Fix

- Move Cube-studio past `2026.09.01` once a fixed release is published (fixed version: unknown from sources)
- Until then, limit instance accounts to a single trusted group and review access to pipeline ids

## Timeline

- 2026-10-23T21:57:13+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-111672

## From the sources

Cube-studio through 2026.09.01 contains a missing authorization vulnerability in myapp/views/view_pipeline.py that allows authenticated users to view or copy other project groups' pipelines by id. Attackers can enumerate sequential pipeline ids via the web, log, monitoring, pod, and copy_pipeline endpoints to expose DAGs, cluster names, namespaces, Argo workflow ids, and pod names, or clone pipelines.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_