CVE-2026-88985 | Kubeflow Pipelines up to 2.16.x API Server page_token/KeyFieldName/SortByFieldName injection

A vulnerability classified as problematic has been found in Kubeflow Pipelines up to 2.16.x. Impacted is an unknown function of the component API Server. This manipulation of the argument page_token/KeyFieldName/SortByFieldName causes injection.

The identification of this vulnerability is CVE-2026-88985. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More