CVE-2026-118758 | Kubeflow Pipelines up to 2.17.x Volume Artifact path traversal

October 29, 2026 Yanac

A vulnerability marked as problematic has been reported in Kubeflow Pipelines up to 2.17.x. This issue affects some unknown processing of the component Volume Artifact Handler. The manipulation leads to path traversal.

This vulnerability is listed as CVE-2026-118758. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More