Back to overview

CVE-2026-47237

HIGH
8.0
CVSS 3.1
Description
Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the Kubeflow UI or APIs, such as the Dashboard, Pipelines API, or Notebooks. With this token, the attacker can take over the user's account and the data that is processed by that user. The attacker needs a valid user with the ``kubeflow-edit`` role / Contributor role in a random Kubeflow namespace to perform this attack. This is given if _Automatic Profile Creation_ is enabled. Version 26.03-rc.1 fixes the issue.

Metadata

CVE ID
CVE-2026-47237
State
PUBLISHED
Assigner
GitHub_M
Reserved
2026-05-18 22:54 UTC
Published
2026-07-21 20:49 UTC
Last updated
2026-07-21 20:49 UTC
Primary CWE
CWE-266
CWE-266: Incorrect Privilege Assignment
Vendor / Product
kubeflow / community-distribution
Sources
cve.org  ·  NVD

Severity & Metrics

8.0 HIGH CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products (1)
VendorProductPlatformVersions
kubeflow community-distribution — < 26.03-rc.1
Weakness (CWE)
CWESourceDescription
CWE-266 cna CWE-266: Incorrect Privilege Assignment
CVSS scores (1)
ScoreSeverityVersionSourceVector
8.0 HIGH 3.1 cna CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
References (3)
Back to overview