Kubeflow Pipelines: unauthenticated path traversal reads arbitrary files via volume artifacts (CVE-2026-118758), fixed in 2.18.0 ยท updates https://pwn.watch/i/kubeflow-pipelines-volume-artifact-path-traversal-cve-2026-118758 Kubeflow Pipelines before 2.18.0 does not confine the file path passed to the volume artifact handler (GET /artifacts/get?source=volume) to the selected volume. A caller who can reach the route and names an existing mounted volume can use path traversal to read any file the artifact-serving process can read. The ml-pipeline-ui frontend pod serves the request when artifact proxying is disabled, and the namespace's artifact-service pod serves it when proxying is enabled. Deployments with authentication disabled need no credentials; in multi-user deployments the caller ordinarily must be authorized for the namespace. The CNA scores it CVSS 3.1 7.5 (unauthenticated, network, high confidentiality impact). Fixed in 2.18.0. The same day Kubeflow published three companion CVEs: CVE-2026-118759 (CVSS 7.5, the run log streaming endpoint skips namespace authorization and exposes pod execution logs across tenants, fixed in 2.18.0), CVE-2026-118760 (CVSS 6.5, missing namespace authorization allows cross-tenant artifact reads, fixed in 2.17.0) and CVE-2026-118761 (CVSS 7.5, a pipeline archive upload decompression bomb can exhaust server memory, fixed in 2.18.0). en Thu, 29 Oct 2026 00:00:00 GMT Kubeflow Pipelines: unauthenticated path traversal reads arbitrary files via volume artifacts (CVE-2026-118758), fixed in 2.18.0: Kubeflow publishes GHSA-2fg9-fx2f-439r and CVE-2026-118758 for a volume artifact path traversal in ml-pipeline-ui, fixed in 2.18.0. https://pwn.watch/i/kubeflow-pipelines-volume-artifact-path-traversal-cve-2026-118758 https://pwn.watch/i/kubeflow-pipelines-volume-artifact-path-traversal-cve-2026-118758#2026-10-29-e715c243 Thu, 29 Oct 2026 00:00:00 GMT high <p><a href="https://github.com/kubeflow/pipelines/security/advisories/GHSA-2fg9-fx2f-439r">Source</a></p> Kubeflow Pipelines: unauthenticated path traversal reads arbitrary files via volume artifacts (CVE-2026-118758), fixed in 2.18.0: Kubeflow publishes three more Pipelines CVEs: cross-tenant run log exposure (CVE-2026-118759, 7.5), cross-tenant artifact reads (CVE-2026-118760, 6.5, fixed in 2.17.0) and an archive upload decompression bomb (CVE-2026-118761, 7.5). https://pwn.watch/i/kubeflow-pipelines-volume-artifact-path-traversal-cve-2026-118758 https://pwn.watch/i/kubeflow-pipelines-volume-artifact-path-traversal-cve-2026-118758#2026-10-29-e66c0d82 Thu, 29 Oct 2026 00:00:00 GMT high <p><a href="https://github.com/kubeflow/pipelines/security/advisories/GHSA-wg5q-x4j9-qm54">Source</a></p>