CVE-2026-47237

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-47237", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-18T22:54:18.271Z", "datePublished": "2026-07-21T20:49:18.293Z", "dateUpdated": "2026-07-22T15:08:36.303Z"}, "containers": {"cna": {"title": "Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing", "problemTypes": [{"descriptions": [{"cweId": "CWE-266", "lang": "en", "description": "CWE-266: Incorrect Privilege Assignment", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/kubeflow/community-distribution/security/advisories/GHSA-v824-8gxh-pgjw", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/kubeflow/community-distribution/security/advisories/GHSA-v824-8gxh-pgjw"}, {"name": "https://github.com/kubeflow/community-distribution/pull/3043", "tags": ["x_refsource_MISC"], "url": "https://github.com/kubeflow/community-distribution/pull/3043"}, {"name": "https://github.com/kubeflow/community-distribution/commit/31b2411dda319bfeae8686ecdf3a39436ec32ce2", "tags": ["x_refsource_MISC"], "url": "https://github.com/kubeflow/community-distribution/commit/31b2411dda319bfeae8686ecdf3a39436ec32ce2"}], "affected": [{"vendor": "kubeflow", "product": "community-distribution", "versions": [{"version": "< 26.03-rc.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-21T20:49:18.293Z"}, "descriptions": [{"lang": "en", "value": "Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the Kubeflow UI or APIs, such as the Dashboard, Pipelines API, or Notebooks. With this token, the attacker can take over the user's account and the data that is processed by that user. The attacker needs a valid user with the ``kubeflow-edit`` role / Contributor role in a random Kubeflow namespace to perform this attack. This is given if _Automatic Profile Creation_ is enabled. Version 26.03-rc.1 fixes the issue."}], "source": {"advisory": "GHSA-v824-8gxh-pgjw", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/kubeflow/community-distribution/security/advisories/GHSA-v824-8gxh-pgjw", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-22T15:07:47.019589Z", "id": "CVE-2026-47237", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-22T15:08:36.303Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-47237", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-22T15:07:47.019589Z"}}}], "references": [{"url": "https://github.com/kubeflow/community-distribution/security/advisories/GHSA-v824-8gxh-pgjw", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-22T15:08:32.292Z"}}], "cna": {"title": "Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing", "source": {"advisory": "GHSA-v824-8gxh-pgjw", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "kubeflow", "product": "community-distribution", "versions": [{"status": "affected", "version": "< 26.03-rc.1"}]}], "references": [{"url": "https://github.com/kubeflow/community-distribution/security/advisories/GHSA-v824-8gxh-pgjw", "name": "https://github.com/kubeflow/community-distribution/security/advisories/GHSA-v824-8gxh-pgjw", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/kubeflow/community-distribution/pull/3043", "name": "https://github.com/kubeflow/community-distribution/pull/3043", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/kubeflow/community-distribution/commit/31b2411dda319bfeae8686ecdf3a39436ec32ce2", "name": "https://github.com/kubeflow/community-distribution/commit/31b2411dda319bfeae8686ecdf3a39436ec32ce2", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the Kubeflow UI or APIs, such as the Dashboard, Pipelines API, or Notebooks. With this token, the attacker can take over the user's account and the data that is processed by that user. The attacker needs a valid user with the ``kubeflow-edit`` role / Contributor role in a random Kubeflow namespace to perform this attack. This is given if _Automatic Profile Creation_ is enabled. Version 26.03-rc.1 fixes the issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-266", "description": "CWE-266: Incorrect Privilege Assignment"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-21T20:49:18.293Z"}}}, "cveMetadata": {"cveId": "CVE-2026-47237", "state": "PUBLISHED", "dateUpdated": "2026-07-22T15:08:36.303Z", "dateReserved": "2026-05-18T22:54:18.271Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-07-21T20:49:18.293Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "community-distribution", "vendor": "kubeflow", "versions": [{"status": "affected", "version": "< 26.03-rc.1"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the Kubeflow UI or APIs, such as the Dashboard, Pipelines API, or Notebooks. With this token, the attacker can take over the user's account and the data that is processed by that user. The attacker needs a valid user with the ``kubeflow-edit`` role / Contributor role in a random Kubeflow namespace to perform this attack. This is given if _Automatic Profile Creation_ is enabled. Version 26.03-rc.1 fixes the issue."}, {"lang": "es", "value": "La Distribuci\u00f3n Comunitaria de Kubeflow ayuda a los usuarios a instalar la Plataforma Kubeflow en cl\u00fasteres de Kubernetes populares. Antes de la versi\u00f3n 26.03-rc.1, una configuraci\u00f3n de Kubeflow basada en los manifiestos oficiales o en la mayor\u00eda de las otras distribuciones empaquetadas de Kubeflow es vulnerable al robo de tokens de autorizaci\u00f3n de cualquier usuario de la interfaz de usuario (UI) de Kubeflow o de las API, como el Dashboard, la API de Pipelines o Notebooks. Con este token, el atacante puede tomar el control de la cuenta del usuario y de los datos que son procesados por ese usuario. El atacante necesita un usuario v\u00e1lido con el rol \u2019kubeflow-edit\u2019 / rol de Colaborador en un espacio de nombres de Kubeflow aleatorio para realizar este ataque. Esto se da si la Creaci\u00f3n Autom\u00e1tica de Perfiles est\u00e1 habilitada. La versi\u00f3n 26.03-rc.1 soluciona el problema."}], "id": "CVE-2026-47237", "lastModified": "2026-10-24T19:10:00.127", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47237", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-07-22T15:07:47.019589Z", "version": "2.0.3"}}]}, "published": "2026-07-21T21:16:50.403", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/kubeflow/community-distribution/commit/31b2411dda319bfeae8686ecdf3a39436ec32ce2"}, {"source": "security-advisories@github.com", "url": "https://github.com/kubeflow/community-distribution/pull/3043"}, {"source": "security-advisories@github.com", "url": "https://github.com/kubeflow/community-distribution/security/advisories/GHSA-v824-8gxh-pgjw"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/kubeflow/community-distribution/security/advisories/GHSA-v824-8gxh-pgjw"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-266"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,26.03-rc.1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "community-distribution", "source": "cna", "vendor": "kubeflow"}, "product": "community-distribution", "vendor": "kubeflow"}], "created": "2026-07-23T21:12:32.754365+00:00", "updated": "2026-07-30T16:30:05.509484+00:00", "vendors": ["kubeflow", "kubeflow$PRODUCT$community-distribution"]}