CVE WATCH / VULNERABILITY DETAIL
CVE-2026-88985
MEDIUMCVSS 6.5NVD feed
Published 5 November 2026 · tracked since 6 November 2026
Description
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server trusts structural SQL identifier fields decoded from the base64-encoded JSON page_token parameter before constructing list queries. An attacker who can invoke an affect
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110813 HIGH 7.5
- CVE-2026-110532 HIGH 8.6
- CVE-2026-110525 HIGH 8.8
- CVE-2026-93424 HIGH 7.5
- CVE-2026-92698 HIGH 8.2
- CVE-2026-92695 HIGH 8.2
- CVE-2026-77463 MEDIUM 6.5
- CVE-2026-49272 HIGH 8.5
- CVE-2026-48705 CRITICAL 9.3
- CVE-2026-46350 CRITICAL 9.1