CVE-2026-54745

Received Received - Intake

Unauthenticated SSRF in Kubeflow Pipelines Frontend

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: GitHub, Inc.

Description

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /_proxy/ route in frontend/server/proxy-middleware.ts. The _routePathWithReferer() function accepts an arbitrary attacker-controlled HTTP or HTTPS target and passes its origin to createProxyMiddleware without a host allowlist or filtering for loopback, link-local, RFC1918, or cluster-local addresses. The route remains outside the authorization middleware when ENABLE_AUTHZ=true and is reachable through /apis/v1beta1/_proxy/, /apis/v2beta1/_proxy/, /pipeline/apis/v1beta1/_proxy/, and /pipeline/apis/v2beta1/_proxy/, including through a crafted Referer header. Requests can forward attacker-controlled methods, headers such as Authorization, Cookie, and X-Forwarded-For, and POST bodies to reachable internal services, while returning the upstream response to the unauthenticated client. This can expose cloud metadata credentials, Kubernetes or service APIs, and other cluster-internal endpoints to unauthorized read or modification. This issue is fixed in version 2.17.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-08-28

Generated

2026-08-29

AI Q&A

2026-08-29

EPSS Evaluated

N/A

NVD

CVE-2026-54745

EUVD

EUVD-2026-67790

Affected Vendors & Products

Vendor	Product	Version / Range
kubeflow	pipelines	2.17.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is an unauthenticated Server-Side Request Forgery (SSRF) and HTTP smuggling vulnerability in Kubeflow Pipelines frontend versions 2.16.0 and earlier. The /_proxy/ route accepts arbitrary attacker-controlled HTTP/HTTPS targets and forwards requests to internal services without proper filtering or authentication. Attackers can access cloud metadata credentials, Kubernetes APIs, and other cluster-internal endpoints by sending crafted requests through exposed proxy endpoints.

Detection Guidance

Check for unauthorized access to internal services via the /_proxy/ route in Kubeflow Pipelines frontend. Inspect logs for requests to /apis/v1beta1/_proxy/, /apis/v2beta1/_proxy/, /pipeline/apis/v1beta1/_proxy/, or /pipeline/apis/v2beta1/_proxy/. Look for unusual headers like Authorization, Cookie, or X-Forwarded-For in these requests.

Impact Analysis

An attacker could exploit this to read or modify sensitive internal services, steal cloud metadata credentials (like AWS IMDS or GCP metadata), access Kubernetes API server, or perform HTTP smuggling attacks. This could lead to data breaches, unauthorized access to cluster resources, or service disruption. The vulnerability is remotely exploitable without authentication.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Exposure of cloud metadata or internal APIs may result in data breaches, triggering compliance violations, regulatory fines, and reputational damage. Organizations using affected versions must patch to maintain compliance.

Mitigation Strategies

Upgrade Kubeflow Pipelines to version 2.17.0 or later to apply the security fix. Remove or restrict access to the /_proxy/ route by adding authorization middleware or deprecating it entirely. Monitor network traffic for suspicious proxy requests.

Hi! I’m here to help you understand CVE-2026-54745. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70