CVE-2026-18621 in AI Inference Server
요약
\~에 의해 MITRE • 2026. 08. 10.
A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf of the attacker. Successful exploitation grants the attacker node-root access, enabling arbitrary code execution and full control over the underlying node.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.