{"id":"CVE-2026-83494","kind":"vulnerability","aliases":["CVE-2026-83494"],"related":[],"title":"training-operator: PyTorchJob webhook lets users bypass immutability check","description":"A flaw was found in the training-operator. An incorrect object casting in the PyTorchJob ValidateUpdate webhook allows users to bypass an immutability check. This vulnerability could enable users to detach a queued job from its quota management system or hijack a running job's controller ownership. The primary impact is a Denial of Service (DoS) condition.","summary":"The training-operator's PyTorchJob update webhook casts an object incorrectly, so its immutability check can be bypassed. A user with permission to edit jobs can detach a queued job from its quota system or take over a running job's controller ownership, mainly causing denial of service.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","kubeflow","kubernetes","pytorch","training-operator"],"not_affected_if":["no-training-operator","no-untrusted-job-users"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-06T07:17:57+00:00","first_seen_at":"2026-11-06T07:40:16+00:00","triaged_at":"2026-11-06T07:41:55+00:00","updated_at":"2026-11-06T07:41:55+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-06T07:41:55Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"training-operator: PyTorchJob webhook lets users bypass immutability check","impact":"medium","summary":"The training-operator's PyTorchJob update webhook casts an object incorrectly, so its immutability check can be bypassed. A user with permission to edit jobs can detach a queued job from its quota system or take over a running job's controller ownership, mainly causing denial of service.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["kubernetes","kubeflow","training-operator","pytorch"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Queued jobs detached from quota, running job ownership hijacked, denial of service","analyst_note":"Confirm affected versions and fixed release of kubeflow/training-operator from the NVD entry or upstream advisory, and whether the webhook is on by default.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-training-operator","no-untrusted-job-users"],"who_is_affected":"Teams running the Kubeflow training-operator on Kubernetes with PyTorchJob resources, where users can create or update jobs. The sources do not say which versions are affected or whether the default install enables the webhook. Clusters without the training-operator or without untrusted job editors are unlikely to be exposed.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.00068,"input_tokens":4204,"output_tokens":520,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-83494':13A,16A 'allow':91C 'bypass':8A,42B,94C 'cast':32B,85C 'caus':69B 'check':10A,39B,97C 'condit':130C 'control':66B,119C 'could':100C 'cve':11A,14A 'denial':70B,126C 'detach':51B,104C 'dos':129C 'edit':48B 'enabl':101C 'flaw':74C 'found':76C 'hijack':114C 'immut':9A,38B,96C 'impact':123C 'incorrect':35B,83C 'infrastructur':17B 'job':49B,54B,64B,107C,117C 'kubeflow':18B 'kubernet':19B 'let':6A 'main':68B 'manag':111C 'object':34B,84C 'oper':3A,23B,27B,81C 'ownership':67B,120C 'permiss':46B 'primari':122C 'pytorch':20B 'pytorchjob':4A,29B,88C 'queu':53B,106C 'quota':57B,110C 'run':63B,116C 'servic':72B,128C 'system':58B,112C 'take':60B 'train':2A,22B,26B,80C 'training-oper':1A,21B,25B,79C 'updat':30B 'user':7A,44B,92C,102C 'validateupd':89C 'vulner':99C 'webhook':5A,31B,90C","nicknames":[],"mitigations":[],"who_affected":"Teams running the Kubeflow training-operator on Kubernetes with PyTorchJob resources, where users can create or update jobs. The sources do not say which versions are affected or whether the default install enables the webhook. Clusters without the training-operator or without untrusted job editors are unlikely to be exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","kubeflow","kubernetes","pytorch","trainingoperator","unknown"],"campaign_type":null,"search_a":"'-2026':12A,15A '-83494':13A,16A 'bypass':8A 'check':10A 'cve':11A,14A 'immut':9A 'let':6A 'oper':3A 'pytorchjob':4A 'train':2A 'training-oper':1A 'user':7A 'webhook':5A","search_b":"'bypass':42B 'cast':32B 'caus':69B 'check':39B 'control':66B 'denial':70B 'detach':51B 'edit':48B 'immut':38B 'incorrect':35B 'infrastructur':17B 'job':49B,54B,64B 'kubeflow':18B 'kubernet':19B 'main':68B 'object':34B 'oper':23B,27B 'ownership':67B 'permiss':46B 'pytorch':20B 'pytorchjob':29B 'queu':53B 'quota':57B 'run':63B 'servic':72B 'system':58B 'take':60B 'train':22B,26B 'training-oper':21B,25B 'updat':30B 'user':44B 'webhook':31B","search_c":"'allow':91C 'bypass':94C 'cast':85C 'check':97C 'condit':130C 'control':119C 'could':100C 'denial':126C 'detach':104C 'dos':129C 'enabl':101C 'flaw':74C 'found':76C 'hijack':114C 'immut':96C 'impact':123C 'incorrect':83C 'job':107C,117C 'manag':111C 'object':84C 'oper':81C 'ownership':120C 'primari':122C 'pytorchjob':88C 'queu':106C 'quota':110C 'run':116C 'servic':128C 'system':112C 'train':80C 'training-oper':79C 'user':92C,102C 'validateupd':89C 'vulner':99C 'webhook':90C","first_public_at":"2026-11-06T07:17:57+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-83494","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83494","severity":null,"published_at":"2026-11-06T07:17:57+00:00","modified_at":"2026-11-06T07:18:00+00:00","first_seen_at":"2026-11-06T07:40:16+00:00","fetched_at":"2026-11-06T07:40:16+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}