Read the docs
TI-2023-25772 Aliases CVE-2023-47630GHSA-3hfq-cx9j-923w

Attacker can cause Kyverno user to unintentionally consume insecure image

Priority LOW 33CWE-345Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Required
Attack complexity
High
Impact type
Security bypass, Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-345 and CWE-200.

Summary

Kyverno is a policy engine designed for Kubernetes. An issue was found in Kyverno that allowed an attacker to control the digest of images used by Kyverno users. The issue would require the attacker to compromise the registry that the Kyverno users fetch their images from. The attacker could then return an vulnerable image to the the user and leverage that to further escalate their position. As such, the attacker would need to know which images the Kyverno user consumes and know of one of multiple exploitable vulnerabilities in previous digests of the images. Alternatively, if the attacker has compromised the registry, they could craft a malicious image with a different digest with intentionally placed vulnerabilities and deliver the image to the user. Users pulling their images by digests and from trusted registries are not impacted by this vulnerability. There is no evidence of this being exploited in the wild. The issue has been patched in 1.10.5. All users are advised to upgrade. There are no known workarounds for this vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00261 18th percentileScored 2026-11-07
Fix Fixed kyverno (kyverno): 1.10.5github.com/kyverno/kyverno (Go): 1.10.5

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
kyvernokyvernobefore 1.10.51.10.5Patch availableCNA
—github.com/kyverno/kyverno (Go)before 1.10.51.10.5Patch availableGHSA-3hfq-cx9j-923w
  • kyverno Vendorkyverno Affected before 1.10.5 Fixed in 1.10.5 Patch available CNA
  • github.com/kyverno/kyverno (Go) Vendor— Affected before 1.10.5 Fixed in 1.10.5 Patch available GHSA-3hfq-cx9j-923w

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:kyverno:kyverno:*:*:*:*:*:*:*:*before 1.10.5Vulnerablekyverno
  • cpe:2.3:a:kyverno:kyverno:*:*:*:*:*:*:*:* Versions before 1.10.5 Vulnerable ·kyverno

Remediation

  • Fix · CNA kyverno (kyverno) Fixed in 1.10.5
  • Fix · GHSA-3hfq-cx9j-923w github.com/kyverno/kyverno (Go) Fixed in 1.10.5 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-47630
  2. 2026-10-03 Alias added: GHSA-3hfq-cx9j-923w

References

Advisory 2

Other 2

  • TI-2026-17733 Kyverno Cross-Namespace Privilege Escalation via Policy apiCall CVSS 3.1CRITICAL 10.0
  • TI-2026-29924 Kyverno: ServiceAccount token leaked to external servers via apiCall service URL CVSS 3.1CRITICAL 9.1
  • TI-2026-29524 kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token CVSS 3.1HIGH 8.1
  • TI-2025-21189 Kyverno ignores subjectRegExp and IssuerRegExp CVSS 3.1HIGH 8.0
  • TI-2026-30072 Kyverno Controller Denial of Service via forEach Mutation Panic CVSS 3.1HIGH 7.7
  • TI-2026-29707 Kyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix) CVSS 3.1HIGH 7.7
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences