Tag
#Kubernetes
Kubeflow Pipelines Cross-Tenant RCE (CVE-2026-77596)
Kubeflow Pipelines before 2.18.0 skips authorization for shared pipeline uploads, letting a low-privilege tenant run code in another namespace. Fixed in 2.18.0.
Nov 06, 2026