CVE-2026-88980 - Kubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validator
CVE ID :CVE-2026-88980 Published : Nov. 5, 2026, 11:17 p.m. | 1 hour, 52 minutes ago Description :Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the frontend GET /artifacts/get route accepts source=http or source=https with...