VYPR

Data Science Pipelines

by Data Science Pipelines

CVEs (1)

  • CVE-2026-18620HigAug 10, 2026
    risk 0.46cvss 7.1epss

    A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper authorization vulnerability in the setDefaultServiceAccount function. By specifying a more privileged ServiceAccount (SA) during a CreateRun request, an attacker can bypass…