CVE-2026-88985

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-88985", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-09-10T16:02:31.342Z", "datePublished": "2026-11-05T22:06:15.200Z", "dateUpdated": "2026-11-09T17:41:27.873Z"}, "containers": {"cna": {"title": "Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server", "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "lang": "en", "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-r4mx-2gr2-8277", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-r4mx-2gr2-8277"}, {"name": "https://github.com/kubeflow/pipelines/pull/13127", "tags": ["x_refsource_MISC"], "url": "https://github.com/kubeflow/pipelines/pull/13127"}, {"name": "https://github.com/kubeflow/pipelines/commit/ac3a4c65677a3bc7a3d5b1e264fba41178d4ab32", "tags": ["x_refsource_MISC"], "url": "https://github.com/kubeflow/pipelines/commit/ac3a4c65677a3bc7a3d5b1e264fba41178d4ab32"}, {"name": "https://github.com/kubeflow/pipelines/releases/tag/2.17.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/kubeflow/pipelines/releases/tag/2.17.0"}], "affected": [{"vendor": "kubeflow", "product": "pipelines", "versions": [{"version": "< 2.17.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-05T22:06:15.200Z"}, "descriptions": [{"lang": "en", "value": "Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server trusts structural SQL identifier fields decoded from the base64-encoded JSON page_token parameter before constructing list queries. An attacker who can invoke an affected pipeline or run list API can inject through KeyFieldName or SortByFieldName, including v1beta1 and v2beta1 run-listing metric paths, and read data available to the API server database account across namespaces. Database modification is not established. This issue is fixed in version 2.17.0."}], "source": {"advisory": "GHSA-r4mx-2gr2-8277", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-09T17:36:07.982475Z", "id": "CVE-2026-88985", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T17:41:27.873Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-88985", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-09T17:36:07.982475Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T17:36:10.249Z"}}], "cna": {"title": "Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server", "source": {"advisory": "GHSA-r4mx-2gr2-8277", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "kubeflow", "product": "pipelines", "versions": [{"status": "affected", "version": "< 2.17.0"}]}], "references": [{"url": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-r4mx-2gr2-8277", "name": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-r4mx-2gr2-8277", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/kubeflow/pipelines/pull/13127", "name": "https://github.com/kubeflow/pipelines/pull/13127", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/kubeflow/pipelines/commit/ac3a4c65677a3bc7a3d5b1e264fba41178d4ab32", "name": "https://github.com/kubeflow/pipelines/commit/ac3a4c65677a3bc7a3d5b1e264fba41178d4ab32", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/kubeflow/pipelines/releases/tag/2.17.0", "name": "https://github.com/kubeflow/pipelines/releases/tag/2.17.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server trusts structural SQL identifier fields decoded from the base64-encoded JSON page_token parameter before constructing list queries. An attacker who can invoke an affected pipeline or run list API can inject through KeyFieldName or SortByFieldName, including v1beta1 and v2beta1 run-listing metric paths, and read data available to the API server database account across namespaces. Database modification is not established. This issue is fixed in version 2.17.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-05T22:06:15.200Z"}}}, "cveMetadata": {"cveId": "CVE-2026-88985", "state": "PUBLISHED", "dateUpdated": "2026-11-09T17:41:27.873Z", "dateReserved": "2026-09-10T16:02:31.342Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-11-05T22:06:15.200Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "pipelines", "vendor": "kubeflow", "versions": [{"status": "affected", "version": "< 2.17.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server trusts structural SQL identifier fields decoded from the base64-encoded JSON page_token parameter before constructing list queries. An attacker who can invoke an affected pipeline or run list API can inject through KeyFieldName or SortByFieldName, including v1beta1 and v2beta1 run-listing metric paths, and read data available to the API server database account across namespaces. Database modification is not established. This issue is fixed in version 2.17.0."}], "id": "CVE-2026-88985", "lastModified": "2026-11-09T18:17:34.993", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-88985", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-09T17:36:07.982475Z", "version": "2.0.3"}}]}, "published": "2026-11-05T22:18:54.587", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/kubeflow/pipelines/commit/ac3a4c65677a3bc7a3d5b1e264fba41178d4ab32"}, {"source": "security-advisories@github.com", "url": "https://github.com/kubeflow/pipelines/pull/13127"}, {"source": "security-advisories@github.com", "url": "https://github.com/kubeflow/pipelines/releases/tag/2.17.0"}, {"source": "security-advisories@github.com", "url": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-r4mx-2gr2-8277"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "github.com/kubeflow/pipelines: Kubeflow Pipelines: Information disclosure via SQL injection in pagination token handling", "id": "2567952", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2567952"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "status": "draft"}, "cwe": "CWE-89", "details": ["A flaw was found in Kubeflow Pipelines, which can lead to information disclosure. An authenticated remote attacker with permissions to list pipelines or runs can exploit this vulnerability by submitting a crafted pagination token containing manipulated database query fields. Because the API server trusts these decoded parameters when constructing queries without proper validation, an attacker can perform Structured Query Language (SQL) injection to read sensitive data across namespaces accessible to the database account."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-88985", "package_state": [{"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Under investigation", "package_name": "rhoai/odh-ml-pipelines-api-server-v2-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Under investigation", "package_name": "rhoai/odh-ml-pipelines-driver-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Under investigation", "package_name": "rhoai/odh-ml-pipelines-launcher-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Under investigation", "package_name": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Under investigation", "package_name": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}], "public_date": "2026-11-05T22:06:15Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-88985\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-88985\nhttps://github.com/kubeflow/pipelines/commit/ac3a4c65677a3bc7a3d5b1e264fba41178d4ab32\nhttps://github.com/kubeflow/pipelines/pull/13127\nhttps://github.com/kubeflow/pipelines/releases/tag/2.17.0\nhttps://github.com/kubeflow/pipelines/security/advisories/GHSA-r4mx-2gr2-8277"], "statement": "This vulnerability is rated as a Moderate severity flaw because exploitation requires authenticated access to the pipeline API endpoints and only permits unauthorized data reading, without enabling data alteration or system compromise. In environments utilizing Kubeflow Pipelines, such as Red Hat OpenShift AI, authenticated users permitted to query pipeline and run listing endpoints can manipulate pagination tokens to read database records across namespaces. While this breaks multi-tenant data boundaries within the application, the blast radius is restricted to the permissions of the pipeline database account.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2.17.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "pipelines", "source": "cna", "vendor": "kubeflow"}, "product": "pipelines", "vendor": "kubeflow"}], "created": "2026-11-05T23:45:07.426244+00:00", "updated": "2026-11-05T23:45:07.700428+00:00", "vendors": ["kubeflow", "kubeflow$PRODUCT$pipelines"]}