Threats tagged 'ghsa-rjr3-43j3-4q8g'

A critical authorization bypass vulnerability exists in the Kubeflow Pipelines API server's HTTP multipart upload endpoints when operating in multi-user mode with the default configuration. The API server does not perform authorization checks for pipeline uploads targeting the empty namespace, which is used for shared, cluster-wide pipelines. This allows low-privilege or unauthenticated users to create or modify shared pipelines, potentially injecting malicious pipeline versions that other tenants execute. The vulnerability arises because the authorization helper skips SubjectAccessReview for empty namespaces, contrary to intended behavior confirmed by the gRPC sibling code. A fix is available in version 0.0.0-20260909234119-62516d8c525f.