{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-88983", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-09-10T16:02:31.342Z", "datePublished": "2026-11-05T21:58:53.008Z", "dateUpdated": "2026-11-10T04:39:56.760Z"}, "containers": {"cna": {"title": "Kubeflow Pipelines \u2014 API server fetches a caller-supplied pipelineURL without host validation", "problemTypes": [{"descriptions": [{"cweId": "CWE-441", "lang": "en", "description": "CWE-441: Unintended Proxy or Intermediary ('Confused Deputy')", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-f7vj-6669-qvv4", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-f7vj-6669-qvv4"}, {"name": "https://github.com/kubeflow/pipelines/pull/12750", "tags": ["x_refsource_MISC"], "url": "https://github.com/kubeflow/pipelines/pull/12750"}, {"name": "https://github.com/kubeflow/pipelines/commit/504d7797c1e061327ddb2bcb8bc1c5dd4940cfc3", "tags": ["x_refsource_MISC"], "url": "https://github.com/kubeflow/pipelines/commit/504d7797c1e061327ddb2bcb8bc1c5dd4940cfc3"}, {"name": "https://github.com/kubeflow/pipelines/releases/tag/2.17.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/kubeflow/pipelines/releases/tag/2.17.0"}], "affected": [{"vendor": "kubeflow", "product": "pipelines", "versions": [{"version": "< 2.17.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-05T21:58:53.008Z"}, "descriptions": [{"lang": "en", "value": "Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server's pipeline and pipeline-version creation paths fetch a caller-supplied pipelineURL without restricting the destination. An authenticated caller with permission to create a pipeline or pipeline version can make requests from the API server to internal services and observe a limited status-code oracle. Arbitrary response-body disclosure, credential theft, and integrity or availability impact are not established. This issue is fixed in version 2.17.0."}], "source": {"advisory": "GHSA-f7vj-6669-qvv4", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-10T04:39:43.782115Z", "id": "CVE-2026-88983", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-10T04:39:56.760Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-88983", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-09-10T16:02:31.342Z", "datePublished": "2026-11-05T21:58:53.008Z", "dateUpdated": "2026-11-10T04:39:56.760Z"}, "containers": {"cna": {"title": "Kubeflow Pipelines \u2014 API server fetches a caller-supplied pipelineURL without host validation", "problemTypes": [{"descriptions": [{"cweId": "CWE-441", "lang": "en", "description": "CWE-441: Unintended Proxy or Intermediary ('Confused Deputy')", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-f7vj-6669-qvv4", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-f7vj-6669-qvv4"}, {"name": "https://github.com/kubeflow/pipelines/pull/12750", "tags": ["x_refsource_MISC"], "url": "https://github.com/kubeflow/pipelines/pull/12750"}, {"name": "https://github.com/kubeflow/pipelines/commit/504d7797c1e061327ddb2bcb8bc1c5dd4940cfc3", "tags": ["x_refsource_MISC"], "url": "https://github.com/kubeflow/pipelines/commit/504d7797c1e061327ddb2bcb8bc1c5dd4940cfc3"}, {"name": "https://github.com/kubeflow/pipelines/releases/tag/2.17.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/kubeflow/pipelines/releases/tag/2.17.0"}], "affected": [{"vendor": "kubeflow", "product": "pipelines", "versions": [{"version": "< 2.17.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-05T21:58:53.008Z"}, "descriptions": [{"lang": "en", "value": "Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server's pipeline and pipeline-version creation paths fetch a caller-supplied pipelineURL without restricting the destination. An authenticated caller with permission to create a pipeline or pipeline version can make requests from the API server to internal services and observe a limited status-code oracle. Arbitrary response-body disclosure, credential theft, and integrity or availability impact are not established. This issue is fixed in version 2.17.0."}], "source": {"advisory": "GHSA-f7vj-6669-qvv4", "discovery": "UNKNOWN"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-88983", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-10T04:39:43.782115Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-10T04:39:49.674Z"}}]}}

{"affected": [{"affectedData": [{"product": "pipelines", "vendor": "kubeflow", "versions": [{"status": "affected", "version": "< 2.17.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server's pipeline and pipeline-version creation paths fetch a caller-supplied pipelineURL without restricting the destination. An authenticated caller with permission to create a pipeline or pipeline version can make requests from the API server to internal services and observe a limited status-code oracle. Arbitrary response-body disclosure, credential theft, and integrity or availability impact are not established. This issue is fixed in version 2.17.0."}], "id": "CVE-2026-88983", "lastModified": "2026-11-10T05:18:12.600", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-88983", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-10T04:39:43.782115Z", "version": "2.0.3"}}]}, "published": "2026-11-05T22:18:54.417", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/kubeflow/pipelines/commit/504d7797c1e061327ddb2bcb8bc1c5dd4940cfc3"}, {"source": "security-advisories@github.com", "url": "https://github.com/kubeflow/pipelines/pull/12750"}, {"source": "security-advisories@github.com", "url": "https://github.com/kubeflow/pipelines/releases/tag/2.17.0"}, {"source": "security-advisories@github.com", "url": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-f7vj-6669-qvv4"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-441"}, {"lang": "en", "value": "CWE-918"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "github.com/kubeflow/pipelines: Kubeflow Pipelines: Server-Side Request Forgery via unrestricted pipeline URL fetching", "id": "2567959", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2567959"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "status": "draft"}, "cwe": "CWE-918", "details": ["A flaw was found in Kubeflow Pipelines. The API server does not restrict destination addresses when fetching caller-supplied URLs during pipeline or pipeline-version creation. An authenticated user with pipeline creation privileges can exploit this Server-Side Request Forgery (SSRF) vulnerability to initiate requests from the API server to internal network services. By analyzing the returned status codes, an attacker can probe and discover internal network resources."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-88983", "package_state": [{"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Under investigation", "package_name": "rhoai/odh-ml-pipelines-api-server-v2-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Under investigation", "package_name": "rhoai/odh-ml-pipelines-driver-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Under investigation", "package_name": "rhoai/odh-ml-pipelines-launcher-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Under investigation", "package_name": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Under investigation", "package_name": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}], "public_date": "2026-11-05T21:58:53Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-88983\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-88983\nhttps://github.com/kubeflow/pipelines/commit/504d7797c1e061327ddb2bcb8bc1c5dd4940cfc3\nhttps://github.com/kubeflow/pipelines/pull/12750\nhttps://github.com/kubeflow/pipelines/releases/tag/2.17.0\nhttps://github.com/kubeflow/pipelines/security/advisories/GHSA-f7vj-6669-qvv4"], "statement": "This vulnerability is evaluated with a Moderate severity rating because exploitation requires an authenticated user with permissions to create or import pipelines, and the resulting request forgery only leaks limited HTTP status codes without exposing response content or sensitive credentials. In Red Hat OpenShift AI environments, access to Kubeflow Pipelines is managed through Kubernetes role-based access control, limiting exposure to authorized project members. Furthermore, the issue cannot be leveraged to modify cluster resources or disrupt service availability directly.", "threat_severity": "Moderate"}