CVE-2026-118759: Cross-Tenant Pod Log Exposure via Authorization Bypass in Kubeflow Pipelines

Vulnerability ID: CVE-2026-118759

CVSS Score: 7.5

Published: 2026-10-30

Prior to version 2.18.0, the Kubeflow Pipelines API server contains a missing authorization and confused deputy vulnerability in its run log streaming endpoint. The HTTP handler for GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log fails to propagate incoming request headers to gRPC metadata and omits caller authorization checks against the requested run. Furthermore, the backend accepts the caller-supplied node_id parameter directly as a Kubernetes pod name without verifying that the pod belongs to the specified pipeline run.…