{"metadata": {"vulnerability": "CVE-2026-77596", "count": 11, "kinds": {"milestone": 3, "sighting": 5, "kev": 0, "other": 3}}, "data": [{"timestamp": "2026-08-20T20:48:20.507Z", "date_only": false, "value": "2026-08-20T20:48:20.507Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-77596", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-05T22:23:13.049Z", "date_only": false, "value": "2026-11-05T22:23:13.049Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-77596", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-05T22:23:13.049Z", "date_only": false, "value": "2026-11-05T22:23:13.049Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-77596", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-05T22:23:13.049Z", "date_only": false, "value": "2026-11-05T22:23:13.049Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-77596", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-05T22:29:22.397Z", "date_only": false, "value": "2026-11-05T22:29:22.397757Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117566194153216632", "record": "CVE-2026-77596", "field": "creation_timestamp", "uuid": "999e8c6d-8aff-423a-99d8-223e06946104", "content": "CVE-2026-77596 Kubeflow Pipelines API server lacks authorization for shared pipeline uploads Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the multi-user HTTP endpoints POST /apis/v2beta1/pipelines/upload and POST /apis/v2beta1/pipelines/upload_version call canUploadVersionedPipeline, which returns without SubjectAccessReview when the target namespace is empty while REQUIRE_NAMESPACE_FOR_PIPELINES defaults to false. A low-privilege tenant can create shared pipelines or inject attacker-controlled versions into existing shared pipelines without the required write permission; if the API server is directly reachable without an authenticating proxy, an unauthenticated caller can exploit the same bypass, while deployments protected by such a proxy do not expose anonymous access. An enabled unpinned recurring run that follows the latest version can then execute the injected specification in another tenant's namespace under that workload's service account, while pinned or embedded-specification runs are not automatically substituted. This issue is fixed in version 2.18.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-77596https://github.com/kubeflow/pipelines/security/advisories/GHSA-rjr3-43j3-4q8ghttps://github.com/kubeflow/pipelines/pull/14352https://github.com/kubeflow/pipelines/commit/62516d8c525f146b754cb515cf441dd0290ad841https://github.com/kubeflow/pipelines/releases/tag/2.18.0#kubeflow #pipelines#CVE_2026_77596#bot", "url": "https://infosec.exchange/users/cve/statuses/117566194153216632"}, {"timestamp": "2026-11-05T22:41:42.871Z", "date_only": false, "value": "2026-11-05T22:41:42.871850Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patchthecve.bsky.social/post/3mzlwtlaikb2w", "record": "CVE-2026-77596", "field": "creation_timestamp", "uuid": "2f74ea9d-405a-4727-a9cd-1a2eaaf1114a", "content": "CVE-2026-77596 CRITICAL (CVSS 9.6)\nKubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows\nFix: https://patchthecve.com/cve/CVE-2026-77596.html", "url": "https://bsky.app/profile/patchthecve.bsky.social/post/3mzlwtlaikb2w"}, {"timestamp": "2026-11-05T23:17:00.767Z", "date_only": false, "value": "2026-11-05T23:17:00.767", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77596", "record": "FKIE_CVE-2026-77596", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-05T23:20:05.338Z", "date_only": false, "value": "2026-11-05T23:20:05.338412Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzlyy74udz2f", "record": "CVE-2026-77596", "field": "creation_timestamp", "uuid": "802f8c45-a0a4-4629-9f88-1c066173d758", "content": "CVE-2026-77596 - pipelines\nIn Kubeflow Pipelines versions before 2.18.0, a tenant without proper write rights could upload or replace shared machine\u2011learning pipelines, and an attacker could even do this\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pipelines #kubeflow #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzlyy74udz2f"}, {"timestamp": "2026-11-06T00:08:25.504Z", "date_only": false, "value": "2026-11-06T00:08:25.504838Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzm3omxw3t22", "record": "CVE-2026-77596", "field": "creation_timestamp", "uuid": "0bbfa444-377b-4486-bb31-af6a5110b56a", "content": "\ud83d\udea8 CVE-2026-77596 \u2014 CVSS 9.6 CRITICAL\n\nKubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77596\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzm3omxw3t22"}, {"timestamp": "2026-11-06T00:47:58.400Z", "date_only": false, "value": "2026-11-06T00:47:58.400237Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzm5vdbtwv2j", "record": "CVE-2026-77596", "field": "creation_timestamp", "uuid": "1f87c223-c048-4015-a11c-fdf1b282dbdf", "content": "\ud83d\udd34 CVE-2026-77596 - Critical (9.6)\n\nKubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflow...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77596/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzm5vdbtwv2j"}, {"timestamp": "2026-11-06T21:40:43.450Z", "date_only": false, "value": "2026-11-06T21:40:43.450", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77596", "record": "FKIE_CVE-2026-77596", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T09:12:13.604Z", "anchors": {"origin": {"timestamp": "2026-11-05T22:23:13.049Z", "date_only": false, "value": "2026-11-05T22:23:13.049Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-77596", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-05T22:23:13.049Z", "date_only": false, "value": "2026-11-05T22:23:13.049Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-77596", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 211740.555002, "hours": 58.81682083388889, "days": 2.450700868078704, "min_seconds": 211740.555002, "max_seconds": 211740.555002, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-05T22:23:13.049Z", "date_only": false, "value": "2026-11-05T22:23:13.049Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-77596", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T09:12:13.604Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}