Vulnerability · critical · CVSS 9.6
Kubeflow Pipelines API server lacks authorization for shared pipeline uploads (CVE-2026-77596)
Tier B · Patch this week – Put it in the sprint
Who’s exposed: Kubeflow Pipelines deployments running in multi-user mode
Tier B because: Full takeover OR secrets exposed OR supply chain
Reach
Attack
Damage
Fix
Full takeover
The Brief
- The Kubeflow Pipelines API server performs no authorization on its HTTP multipart upload endpoints when the target namespace is shared, in multi-user mode.
- The affected endpoints are POST /apis/v2beta1/pipelines/upload and POST /apis/v2beta1/pipelines/uploadversion.
- The issue is tracked as CVE-2026-77596 and was published in the GitHub Advisory Database on 2026-11-09.
Why it matters
Users of a shared Kubeflow Pipelines deployment may be able to upload pipelines into namespaces they should not have access to.
The checklist behind the tier
Checklist · 2 of 10 yes
| Yes | Hits tech teams | Judgment: Kubeflow Pipelines is an ML platform that data science and ops teams build with and run. |
| No | Core infrastructure | Judgment: Kubeflow is a specialized ML platform, not software nearly every team runs. |
| No | Popular tool | Judgment: Kubeflow is used mainly by ML platform teams, a niche rather than mainstream developer tech. |
| No | Exploited in the wild | GitHub Advisory Database: describes a missing authorization flaw only; no observed attacks reported. |
| No | Public exploit | GitHub Advisory Database: advisory only; no exploit code or proof-of-concept mentioned. |
| No | Remote, no login | CVSSCVSS: CVE-2026-77596 AV:N/PR:L/UI:N |
| Yes | Full takeover | CVSSCVE-2026-77596: CVSS rates confidentiality and integrity impact high |
| No | Secrets exposed | GitHub Advisory Database: no data theft or exposure reported. |
| No | Supply chain | GitHub Advisory Database: an authorization flaw, not compromised packages or build pipelines. |
| No | No fix yet | GitHub AdvisoryGitHub Advisory: github.com/kubeflow/pipelines fixed in 0.0.0-20260909234119-62516d8c525f |
The official record
From CVE.org, CISA’s Known Exploited Vulnerabilities catalog, FIRST EPSS and the GitHub Advisory Database. Where these answer a checklist fact, they win over the reporting.
CVE-2026-77596 ↗CVSS 9.6 critical AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Kubeflow Pipelines API server lacks authorization for shared pipeline uploads
- Exploited
- Not in CISA’s exploited catalog
- EPSS
- <1% chance of exploitation in the next 30 days · higher than 16% of all CVEs
- Fix
- github.com/kubeflow/pipelines (go) fixed in 0.0.0-20260909234119-62516d8c525f
- Weakness
- CWE-639, CWE-862
Timeline
Vulnerability published in the GitHub Advisory Database (GHSA-rjr3-43j3-4q8g)
GitHub Advisory Database
Kubeflow Pipelines API server lacks authorization for shared pipeline uploads (CVE-2026-77596)
Source
Kubeflow Pipelines API server lacks authorization for shared pipeline uploads (CVE-2026-77596) ↗ GitHub Advisory Database · 1h ago
First seen · 1 source · Full story page · How tiers are decided