CVE-2026-88986 · Infrastructure
NO FIX YET · SEE WHAT TO DO
Kubeflow Pipelines frontend routes /pipeline/k8s/pod and /pipeline/k8s/pod/events reflect untrusted podname and podnamespace query values into HTML-capable error responses. An attacker who tricks a logged-in user into opening a crafted link can run JavaScript in the frontend origin.
first public Sep 14, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Deployments of Kubeflow Pipelines before 2.15.0 whose frontend exposes the /pipeline/k8s/pod routes to users who have authenticated access. Exploitation needs a user to follow a crafted link, and cookie disclosure depends on cookie attributes. Server-side code execution or availability impact is not established by the sources.
Not affected if auth-required, fixed-version
Who cares kubeflow-pipelines, kubernetes, machine-learning, self-hosted
2.15.0./pipeline/k8s/pod and /pipeline/k8s/pod/events on the deployment.2.15.0.Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.15.0, the frontend routes /pipeline/k8s/pod and /pipeline/k8s/pod/events use frontend/server/k8s-helper.ts to include untrusted podname and podnamespace query values and backend error details in HTML-capable error responses. An unauthenticated attacker can craft a link that executes JavaScript in the frontend origin when a user who satisfies the deployment's authentication and route-access requirements follows it and reaches an affected response. Cookie disclosure depends on cookie attributes, and server-side code execution or availability impact is not established. This issue is fixed in version 2.15.0.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.