10:20
2026-05-20
insinuator.net
ai-infrastructure
CVE-2026-47237 β Overly Permissive Istio Permissions Allow Kubeflow Authorization Token Stealing
A vulnerability in Kubeflow versions prior to 1.10 allows attackers with Contributor or kubeflow-edit roles to steal authorization tokens via overly permissive Istio permissions, enabling account takeβ¦