{"id":"CVE-2026-118761","aliases":["GHSA-8fmv-6rg5-5924"],"title":"Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory","titleSource":"GitHub_M","descriptionSource":"OSV","declaredSeverity":"HIGH","description":"## Summary\n\nThe Kubeflow Pipelines API server decompresses uploaded pipeline archives without adequately bounding expanded data in affected versions. A small ZIP or gzip-compressed tar archive can consume disproportionately large amounts of memory while the server locates or reads the pipeline file, potentially exhausting API-server resources and interrupting service.\n\nMultipart pipeline and pipeline-version upload processing decompresses the archive before namespace authorization, so a caller who can reach those endpoints does not need a successful pipeline-create authorization decision to trigger the issue. External authentication and network controls can restrict reachability. URL-import handlers authorize before fetching and decompressing a remote archive.\n\nThe amount of expansion needed to exhaust memory depends on deployment resource limits and concurrent activity; no particular archive is guaranteed to crash every deployment.\n\n## Remediation\n\nUpgrade the API server to **[Kubeflow Pipelines 2.18.0](https://github.com/kubeflow/pipelines/releases/tag/2.18.0)**. Versions through 2.17.3 are affected; the first affected release has not been established.\n\n[PR #14171](https://github.com/kubeflow/pipelines/pull/14171) bounds compressed input and extracted pipeline data. [PR #14186](https://github.com/kubeflow/pipelines/pull/14186) strengthens the total tar traversal budget, including metadata and skipped entries. The 2.18 release also includes configurable upload and specification limits; operators should review the shipped settings and resource budget. These controls address pipeline archive amplification and do not establish general HTTP-body, temporary-disk, concurrency, or CPU limits.\n\nUntil upgrading, restrict access to upload and import endpoints and apply deployment-level request and resource controls. A compressed upload-size limit alone does not prevent decompression amplification. Regression tests cover compressed input, selected-entry boundaries, and tar traversal budgets; no deployed-server OOM test was performed for this assessment.\n\n## Credit\n\n[bugbunny.ai](https://bugbunny.ai) discovered and reported the issue. Ayush Gupta ([@Ayush-kathil](https://github.com/Ayush-kathil)) authored the archive fixes in #14171 and #14186, with Jeff Spahr ([@jeffspahr](https://github.com/jeffspahr)) contributing regression coverage to #14171.\n\n[@BrianWillows](https://github.com/BrianWillows) later submitted a mixed report that included source analysis of pipeline-archive decompression.","severity":"high","score":7.5,"published":"2026-10-29T16:37:44.333Z","modified":"2026-10-30T23:30:04.079Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Go","name":"github.com/kubeflow/pipelines","sources":[{"name":"OSV · GHSA-8fmv-6rg5-5924","url":"https://osv.dev/vulnerability/GHSA-8fmv-6rg5-5924"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.0.0-20260831164314-ba9ae72cc860"}],"type":"SEMVER"}],"versions":[],"fixed":["0.0.0-20260831164314-ba9ae72cc860"]},{"ecosystem":"Go","name":"github.com/kubeflow/pipelines","sources":[{"name":"OSV · GHSA-8fmv-6rg5-5924","url":"https://osv.dev/vulnerability/GHSA-8fmv-6rg5-5924"}],"ranges":[],"versions":["1.7.0-alpha.3"],"fixed":[]}],"sourceAffected":[],"references":["https://github.com/kubeflow/pipelines/security/advisories/GHSA-8fmv-6rg5-5924","https://github.com/kubeflow/pipelines/pull/14171","https://github.com/kubeflow/pipelines/pull/14186","https://github.com/kubeflow/pipelines/commit/1121d9a081fdf9e2107c39abb2cd8947727c6953","https://github.com/kubeflow/pipelines/commit/ba9ae72cc860e3afbea232185e4132fc2896cac5","https://github.com/kubeflow/pipelines/releases/tag/2.18.0","https://nvd.nist.gov/vuln/detail/CVE-2026-118761","https://github.com/kubeflow/pipelines"],"sources":[{"name":"CVE","id":"CVE-2026-118761","modified":"2026-10-29T20:18:59.625Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-118761"},{"name":"OSV","id":"GHSA-8fmv-6rg5-5924","modified":"2026-10-30T23:30:04.079827623Z","url":"https://osv.dev/vulnerability/GHSA-8fmv-6rg5-5924"}],"assessments":[{"source":"GitHub_M","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5},{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5}],"cve":{"records":[{"id":"CVE-2026-118761","source":"GitHub_M","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-28T19:20:05.017Z","published":"2026-10-29T16:37:44.333Z","modified":"2026-10-29T20:18:59.625Z"}],"publishers":[{"name":"GitHub_M","role":"CNA","organizationId":"a0819718-46f1-4df5-94e2-005712e83aaa","modified":"2026-10-29T16:37:44.333Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-29T20:18:59.625Z"}],"references":[{"url":"https://github.com/kubeflow/pipelines/security/advisories/GHSA-8fmv-6rg5-5924","tags":["x_refsource_CONFIRM"],"source":"GitHub_M"},{"url":"https://github.com/kubeflow/pipelines/pull/14171","tags":["x_refsource_MISC"],"source":"GitHub_M"},{"url":"https://github.com/kubeflow/pipelines/pull/14186","tags":["x_refsource_MISC"],"source":"GitHub_M"},{"url":"https://github.com/kubeflow/pipelines/commit/1121d9a081fdf9e2107c39abb2cd8947727c6953","tags":["x_refsource_MISC"],"source":"GitHub_M"},{"url":"https://github.com/kubeflow/pipelines/commit/ba9ae72cc860e3afbea232185e4132fc2896cac5","tags":["x_refsource_MISC"],"source":"GitHub_M"},{"url":"https://github.com/kubeflow/pipelines/releases/tag/2.18.0","tags":["x_refsource_MISC"],"source":"GitHub_M"}],"weaknesses":[{"id":"CWE-409","description":"CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)","source":"GitHub_M"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-29T20:18:49.737846Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"partial"}]}]},"products":[{"vendor":"kubeflow","name":"pipelines","platforms":[],"versions":[{"version":"< 2.18.0","status":"affected"}],"cpes":[],"source":"GitHub_M","url":"https://www.cve.org/CVERecord?id=CVE-2026-118761"}],"remediation":[],"observedAt":"2026-10-31T00:42:07.555Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T09:15:31.262Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T02:20:34.294Z","attemptedAt":"2026-10-30T02:20:34.294Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-30T02:20:34.585Z","attemptedAt":"2026-10-30T02:20:34.585Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T02:20:34.899Z","attemptedAt":"2026-10-30T02:20:34.899Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T02:20:34.120Z","attemptedAt":"2026-10-30T02:20:34.120Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-118761","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118761","modified":"2026-10-29T21:17:16.853","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","checkedAt":"2026-10-30T02:20:34.294Z"},{"source":"ENISA EUVD","id":"EUVD-2026-113219","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113219","modified":"Oct 29, 2026, 8:18:59 PM","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","checkedAt":"2026-10-30T02:20:34.899Z"}],"aiSummary":{"text":"Kubeflow Pipelines versions before 2.18.0 are affected by a decompression bomb vulnerability, where a small compressed archive can consume large amounts of memory, potentially exhausting server resources. An attacker with access to the upload endpoints can trigger the issue without successful pipeline-create authorization. The impact depends on deployment resource limits and concurrent activity.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-31T00:46:07.621Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-118761"},{"name":"OSV","url":"https://osv.dev/vulnerability/GHSA-8fmv-6rg5-5924"}]}}