Read the docs

kyverno

Records53All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high32CVSS 7.0–8.9

Exploited now

kyverno records in CISA KEV

No kyverno vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Kyverno 12 records HIGH Policy-reporter-ui 1 record MEDIUM

Records

53 records

TI-2026-39369 CVE-2026-54523 · GHSA-79gf-7frw-68m9

Missing authorization in kyverno

Priority HIGH 76

Kyverno is a policy engine designed for cloud native platform engineering teams.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00466 Published 2026-08-26 Fixed in 1.18.2 CWE-862
TI-2025-14241 CVE-2025-15613 · GHSA-8g8h-v9pm-r6xg

Kyverno before v1.13.4 SSRF via Service Call

Priority HIGH 70

Kyverno before v1.13.4 is vulnerable to server-side request forgery (SSRF) via its Service Call functionality.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00357 Published 2026-09-01 Fixed in 1.13.4 CWE-918
TI-2026-64863 CVE-2026-100707 · GHSA-66wc-m66q-pf76

Kyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded Path

Priority HIGH 69

Kyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of namespaced Policy resources due to inconsistent path interpretation between validation and execution.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.0046 Published 2026-09-26 Fixed in 1.19.1 CWE-22
TI-2026-57891 CVE-2026-84195 · GHSA-4x34-82r8-65cf

Kyverno before 1.16.4 Credential Leak via apiCall

Priority HIGH 69

Kyverno before 1.16.4 automatically attaches the admission controller's ServiceAccount token to outbound HTTP requests in apiCall service mode without explicit authorization headers.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00386 Published 2026-09-01 Fixed in 1.16.4 CWE-200
TI-2025-21189 CVE-2025-29778 · GHSA-46mp-8w32-6g94

Kyverno ignores subjectRegExp and IssuerRegExp

Priority HIGH 68

Kyverno is a policy engine designed for cloud native platform engineering teams.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00343 Published 2025-03-24 Fixed in 1.14.0-alpha.1 CWE-285
TI-2026-57894 CVE-2026-84199 · GHSA-q5v3-pp68-6crj

Kyverno before 1.16.2 SSRF via APICall Feature

Priority MEDIUM 64

Kyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall feature.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00357 Published 2026-09-01 Fixed in 1.16.2 CWE-918
TI-2026-04177 CVE-2026-4789 · GHSA-rggm-jjmc-3394

Server-side request forgery in Kyverno

Priority MEDIUM 50

Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00709 Published 2026-03-30 Fixed in 1.17.0 CWE-918
TI-2026-64862 CVE-2026-100706 · GHSA-j68q-wq49-88gg

kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPath

Priority MEDIUM 43

kyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall urlPath, allowing namespace tenants to bypass the per-namespace clamp and create objects in other namespaces as the admission-c…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00613 Published 2026-09-26 Fixed in 1.19.1 CWE-441
TI-2026-85289 CVE-2026-122311 · GHSA-p59g-p6q6-8969

Kyverno path traversal in namespaced CEL policies reaches cluster objects

Priority MEDIUM 41

Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument of resource.get() and resource.post(), allowing namespaced CEL policies to escape their namespace.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00448 Published 2026-11-05 Fixed in 1.19.2 CWE-22
TI-2026-85282 CVE-2026-122304 · GHSA-vhcf-rq9h-r35p

Authorization bypass in Kyverno lets namespace admins read Secrets

Priority MEDIUM 41

Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace admins to escape namespace confinement because the cleanup controller builds its context loader with a nil policy.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00392 Published 2026-11-05 Fixed in 1.19.2 CWE-863
TI-2026-85291 CVE-2026-122313 · GHSA-8qwp-w9x6-mcp7

Privilege escalation in Kyverno lets tenants mutate other namespaces

Priority MEDIUM 40

Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to modify resources in other namespaces through NamespacedMutatingPolicy targetMatchConstraints.express…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00311 Published 2026-11-05 Fixed in 1.19.2 CWE-269
TI-2026-85288 CVE-2026-122310 · GHSA-4c7q-j33x-866w

Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPath

Priority MEDIUM 40

Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after cleaning it but executes the raw path, whose fragment or query the Kubernetes client discards.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00357 Published 2026-11-05 Fixed in 1.19.2 CWE-436
TI-2026-85281 CVE-2026-122303 · GHSA-m6w5-f9j8-9pjp

Cross-namespace resource overwrite in Kyverno via NamespacedMutatingPolicy

Priority MEDIUM 40

Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace tenants to overwrite resources in other namespaces via NamespacedMutatingPolicy mutate-existing targetMatchConstraint…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.0033 Published 2026-11-05 Fixed in 1.19.2 CWE-862
Load more
Open these records in search →