Threats tagged 'ghsa-2xwh-426q-42c5'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.1%	CVE-2026-88982github.com/kubeflow/pipelines · Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in Medium5.4EPSS 0.1%2026-11-09GCVE DatabaseCVE-2026-88982 Kubeflow Pipelines V1/raw-Argo execution cache does not separate cached results by Kubernetes namespace, allowing tenants sharing the cache service to read or substitute cached outputs across namespaces. This cross-tenant cache key collision impacts confidentiality and integrity of cached step outputs but does not enable arbitrary code execution. The issue affects multi-tenant deployments using the legacy cache service with cache-enabled V1/raw-Argo steps. A fix was merged and released in version 2.18.0. EPSS 0.1%Report on CVE-2026-88982 Vulnerability CWE-345 #ghsa-2xwh-426q-42c5 #go	GCVE Database	2026-11-09

Page 1 of 1