# cve.now: Kyverno

The newest entries naming Kyverno as an affected vendor (up to 200), of 54 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-124441](https://cve.now/CVE-2026-124441.md): Kyverno before 1.19.2 Authorization Bypass via Variable Generate Target Kind (CVSS 8.7)
- [CVE-2026-124440](https://cve.now/CVE-2026-124440.md): Kyverno 1.19.1 Privilege Escalation via apiCall Namespace Clamp Bypass (CVSS 9.4)
- [CVE-2026-122323](https://cve.now/CVE-2026-122323.md): Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression (CVSS 8.7)
- [CVE-2026-122322](https://cve.now/CVE-2026-122322.md): Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompression (CVSS 8.7)
- [CVE-2026-122321](https://cve.now/CVE-2026-122321.md): Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypass (CVSS 8.5)
- [CVE-2026-122320](https://cve.now/CVE-2026-122320.md): Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone (CVSS 8.3)
- [CVE-2026-122319](https://cve.now/CVE-2026-122319.md): Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic (CVSS 8.7)
- [CVE-2026-122318](https://cve.now/CVE-2026-122318.md): Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificates (CVSS 7.2)
- [CVE-2026-122316](https://cve.now/CVE-2026-122316.md): Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExisting (CVSS 8.4)
- [CVE-2026-122315](https://cve.now/CVE-2026-122315.md): Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panic (CVSS 8.7)
- [CVE-2026-122314](https://cve.now/CVE-2026-122314.md): Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panic (CVSS 8.7)
- [CVE-2026-122313](https://cve.now/CVE-2026-122313.md): Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy (CVSS 9.4)
- [CVE-2026-122312](https://cve.now/CVE-2026-122312.md): Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query String (CVSS 8.3)
- [CVE-2026-122311](https://cve.now/CVE-2026-122311.md): Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argument (CVSS 9.4)
- [CVE-2026-122310](https://cve.now/CVE-2026-122310.md): Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPath (CVSS 9.4)
- [CVE-2026-122309](https://cve.now/CVE-2026-122309.md): Kyverno before 1.19.2 Denial of Service via Unbounded CEL Policy Evaluation Cost (CVSS 8.2)
- [CVE-2026-122308](https://cve.now/CVE-2026-122308.md): Kyverno before 1.19.2 Label Spoofing via Generation Handler processRequest (CVSS 8.4)
- [CVE-2026-122307](https://cve.now/CVE-2026-122307.md): Kyverno before 1.19.2 Policy Bypass via admissionpolicygenerator PolicyException Handling (CVSS 8.3)
- [CVE-2026-122306](https://cve.now/CVE-2026-122306.md): Kyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard Matching (CVSS 8.3)
- [CVE-2026-122305](https://cve.now/CVE-2026-122305.md): Kyverno before 1.19.2 Denial of Service via Nested Variable Substitution Loop (CVSS 8.3)
- [CVE-2026-122304](https://cve.now/CVE-2026-122304.md): Kyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context Loader (CVSS 9.4)
- [CVE-2026-122303](https://cve.now/CVE-2026-122303.md): Kyverno 1.17.0 before 1.19.2 Cross-Namespace Resource Overwrite via NamespacedMutatingPolicy (CVSS 9.4)
- [CVE-2026-122302](https://cve.now/CVE-2026-122302.md): Kyverno before 1.19.2 Privilege Escalation via Generate Rule Permission Check (CVSS 9.3)
- [CVE-2026-100707](https://cve.now/CVE-2026-100707.md): Kyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded Path (CVSS 8.3)
- [CVE-2026-100706](https://cve.now/CVE-2026-100706.md): kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPath (CVSS 9.4)
- [CVE-2026-100705](https://cve.now/CVE-2026-100705.md): Kyverno before 1.19.1 SSRF via legacy apiCall service executor (CVSS 8.3)
- [CVE-2026-100704](https://cve.now/CVE-2026-100704.md): Kyverno before 1.19.1 ImageValidatingPolicy Exception Bypass (CVSS 8.3)
- [CVE-2026-100703](https://cve.now/CVE-2026-100703.md): Kyverno before 1.19.1 Cross-Namespace Data Access via globalcontext.Lib (CVSS 8.3)
- [CVE-2026-84200](https://cve.now/CVE-2026-84200.md): Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions (CVSS 9.4)
- [CVE-2026-84199](https://cve.now/CVE-2026-84199.md): Kyverno before 1.16.2 SSRF via APICall Feature (CVSS 6.9)
- [CVE-2026-84196](https://cve.now/CVE-2026-84196.md): Kyverno before 1.18.0 Server-Side Request Forgery via apiCall (CVSS 8.3)
- [CVE-2026-84195](https://cve.now/CVE-2026-84195.md): Kyverno before 1.16.4 Credential Leak via apiCall (CVSS 8.3)
- [CVE-2025-15613](https://cve.now/CVE-2025-15613.md): Kyverno before v1.13.4 SSRF via Service Call (CVSS 6.9)
- [CVE-2023-54356](https://cve.now/CVE-2023-54356.md): Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites (CVSS 9.3)
- [CVE-2026-54523](https://cve.now/CVE-2026-54523.md): Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any… (CVSS 9.6)
- [CVE-2026-44245](https://cve.now/CVE-2026-44245.md): Kyverno: \[policy-reporter-ui\] XSS via Stored Property Values in PropertyCard Component (CVSS 6.1)
- [CVE-2026-41485](https://cve.now/CVE-2026-41485.md): Kyverno Controller Denial of Service via forEach Mutation Panic (CVSS 7.7)
- [CVE-2026-41323](https://cve.now/CVE-2026-41323.md): Kyverno: ServiceAccount token leaked to external servers via apiCall service URL (CVSS 8.1)
- [CVE-2026-41068](https://cve.now/CVE-2026-41068.md): Kyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix) (CVSS 7.7)
- [CVE-2026-40868](https://cve.now/CVE-2026-40868.md): kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token (CVSS 8.1)
- [CVE-2026-4789](https://cve.now/CVE-2026-4789.md): CVE-2026-4789 (CVSS 9.8)
- [CVE-2026-23881](https://cve.now/CVE-2026-23881.md): Kyverno Denial of Service via Context Variable Amplification in Policy Engine (CVSS 7.7)
- [CVE-2026-22039](https://cve.now/CVE-2026-22039.md): Kyverno Cross-Namespace Privilege Escalation via Policy apiCall (CVSS 10.0)
- [CVE-2025-47281](https://cve.now/CVE-2025-47281.md): Kyverno's Improper JMESPath Variable Evaluation Leads to Denial of Service (CVSS 7.7)
- [CVE-2025-46342](https://cve.now/CVE-2025-46342.md): Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements (CVSS 8.6)
- [CVE-2025-29778](https://cve.now/CVE-2025-29778.md): Kyverno ignores subjectRegExp and IssuerRegExp (CVSS 5.8)
- [CVE-2024-48921](https://cve.now/CVE-2024-48921.md): Kyverno's PolicyException objects can be created in any namespace by default (CVSS 8.7)
- [CVE-2023-47630](https://cve.now/CVE-2023-47630.md): Attacker can cause Kyverno user to unintentionally consume insecure image (CVSS 7.1)
- [CVE-2023-42813](https://cve.now/CVE-2023-42813.md): Denial of service from malicious manifest in kyverno (CVSS 6.1)
- [CVE-2023-42814](https://cve.now/CVE-2023-42814.md): Denial of service from malicious image manifest in kyverno (CVSS 3.1)
- [CVE-2023-42815](https://cve.now/CVE-2023-42815.md): Denial of service from malicious image manifest in kyverno (CVSS 3.1)
- [CVE-2023-42816](https://cve.now/CVE-2023-42816.md): Denial of service from malicious signature in kyverno (CVSS 6.1)
- [CVE-2023-34091](https://cve.now/CVE-2023-34091.md): Kyverno resource with a deletionTimestamp may allow policy circumvention (CVSS 6.5)
- [CVE-2023-33191](https://cve.now/CVE-2023-33191.md): kyverno seccomp control can be circumvented (CVSS 4.6)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/kyverno
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.