Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#authorization

1 articles

Deep Dive

Kubeflow Pipelines Cross-Tenant RCE (CVE-2026-77596)

Kubeflow Pipelines before 2.18.0 skips authorization for shared pipeline uploads, letting a low-privilege tenant run code in another namespace. Fixed in 2.18.0.

Ostorlab Team
Nov 06, 2026