CVE-2026-77596 | Kubeflow Pipelines up to 2.17.x HTTP Endpoint upload canUploadVersionedPipeline privileges management (EUVD-2026-117830)

A vulnerability was found in Kubeflow Pipelines up to 2.17.x. It has been rated as critical. This affects the function canUploadVersionedPipeline of the file /apis/v2beta1/pipelines/upload of the component HTTP Endpoint. Performing a manipulation results in improper privilege management.

This vulnerability is reported as CVE-2026-77596. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More