CVE-2026-110220: Server-Side Request Forgery (SSRF) in Kubeflow Model Registry
Description
Kubeflow Model Registry versions up to 0.3.17 contain a server-side request forgery (SSRF) vulnerability. This flaw allows namespace users to steal the controller ServiceAccount token by exploiting the modelregistry.kubeflow.org/url annotation. An attacker can create an InferenceService with a malicious annotation pointing to their server, capturing the bearer token and potentially modifying other tenants' InferenceServices across the cluster.
CVSS v4.0
Score 7.1high
Affected software
Kubeflow
Model Registry
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-110220 describes an SSRF vulnerability in Kubeflow Model Registry through version 0.3.17. The vulnerability arises from the modelregistry.kubeflow.org/url annotation, which namespace users can manipulate to cause the controller to send requests to attacker-controlled servers. This enables attackers to exfiltrate the controller's ServiceAccount bearer token. With this token, attackers can modify InferenceServices belonging to other tenants cluster-wide, escalating their privileges within the cluster environment.
Potential Impact
The vulnerability allows attackers with namespace-level access to steal the controller ServiceAccount token, which can be used to modify InferenceServices cluster-wide. This can lead to unauthorized changes affecting multiple tenants, potentially compromising the integrity and availability of services managed by Kubeflow Model Registry.
Mitigation Recommendations
No explicit patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict namespace user permissions and monitor for suspicious InferenceService annotations referencing external URLs.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-10-13T17:59:34.697Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ace80b52cdf04f6569c00b8
Added to database: 10/13/2026, 19:04:21 UTC
Last enriched: 10/13/2026, 19:18:30 UTC
Last updated: 10/13/2026, 19:20:40 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.