Kyverno

Kyverno

13 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2026-44245

Exploit
  • EPSS 0.18%
  • Veröffentlicht 12.05.2026 22:46:59
  • Zuletzt bearbeitet 26.05.2026 08:35:25

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 2.5.2, Vue 3's v-html directive is the framework-documented mechanism for injecting raw HTML, and it intentionally disables the auto-escaping that {{ }} interpo...

7.7

CVE-2026-41485

Exploit
  • EPSS 0.37%
  • Veröffentlicht 24.04.2026 03:27:08
  • Zuletzt bearbeitet 27.04.2026 17:54:40

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.17.2 and 1.16.4, an unchecked type assertion in the `forEach` mutation handler allows any user with permission to create a `Policy` or `ClusterPolicy...

9.1

CVE-2026-41323

Exploit
  • EPSS 0.56%
  • Veröffentlicht 24.04.2026 03:21:36
  • Zuletzt bearbeitet 27.04.2026 17:53:22

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.18.0-rc1, 1.17.2-rc1, and 1.16.4, Kyverno's apiCall feature in ClusterPolicy automatically attaches the admission controller's ServiceAccount token t...

7.7

CVE-2026-41068

Exploit
  • EPSS 0.27%
  • Veröffentlicht 24.04.2026 03:14:27
  • Zuletzt bearbeitet 27.04.2026 17:48:04

Kyverno is a policy engine designed for cloud native platform engineering teams. The patch for CVE-2026-22039 fixed cross-namespace privilege escalation in Kyverno's `apiCall` context by validating the `URLPath` field. However, the ConfigMap context ...

8.1

CVE-2026-40868

Exploit
  • EPSS 0.29%
  • Veröffentlicht 21.04.2026 18:22:01
  • Zuletzt bearbeitet 27.04.2026 19:41:27

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 1.16.4, kyverno’s apiCall servicecall helper implicitly injects Authorization: Bearer ... using the kyverno controller serviceaccount token when a policy does n...

9.8

CVE-2026-4789

Medienbericht
  • EPSS 0.71%
  • Veröffentlicht 30.03.2026 20:44:00
  • Zuletzt bearbeitet 03.04.2026 18:17:51

Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.

6.5

CVE-2026-23881

Exploit
  • EPSS 0.53%
  • Veröffentlicht 27.01.2026 16:10:44
  • Zuletzt bearbeitet 02.02.2026 15:20:13

Kyverno is a policy engine designed for cloud native platform engineering teams. Versions prior to 1.16.3 and 1.15.3 have unbounded memory consumption in Kyverno's policy engine that allows users with policy creation privileges to cause denial of ser...

9.9

CVE-2026-22039

Medienbericht Exploit
  • EPSS 0.52%
  • Veröffentlicht 27.01.2026 16:07:19
  • Zuletzt bearbeitet 02.02.2026 15:13:57

Kyverno is a policy engine designed for cloud native platform engineering teams. Versions prior to 1.16.3 and 1.15.3 have a critical authorization boundary bypass in namespaced Kyverno Policy apiCall. The resolved `urlPath` is executed using the Kyve...

7.7

CVE-2025-47281

Exploit
  • EPSS 0.48%
  • Veröffentlicht 23.07.2025 20:35:21
  • Zuletzt bearbeitet 05.08.2025 15:51:19

Kyverno is a policy engine designed for cloud native platform engineering teams. In versions 1.14.1 and below, a Denial of Service (DoS) vulnerability exists due to improper handling of JMESPath variable substitutions. Attackers with permissions to c...

8.2

CVE-2025-46342

Exploit
  • EPSS 0.62%
  • Veröffentlicht 30.04.2025 14:55:13
  • Zuletzt bearbeitet 16.05.2025 16:42:35

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.13.5 and 1.14.0, it may happen that policy rules using namespace selector(s) in their match statements are mistakenly not applied during admission re...