Kyverno vulnerabilities
54 CVEs and advisories name Kyverno as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-84196Kyverno before 1.18.0 Server-Side Request Forgery via apiCall
- CVE-2026-84195Kyverno before 1.16.4 Credential Leak via apiCall
- CVE-2025-15613Kyverno before v1.13.4 SSRF via Service Call
- CVE-2023-54356Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites
- CVE-2026-54523Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any…
- CVE-2026-44245Kyverno: [policy-reporter-ui] XSS via Stored Property Values in PropertyCard Component
- CVE-2026-41485Kyverno Controller Denial of Service via forEach Mutation Panic
- CVE-2026-41323Kyverno: ServiceAccount token leaked to external servers via apiCall service URL
- CVE-2026-41068Kyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix)
- CVE-2026-40868kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token
- CVE-2026-4789CVE-2026-4789
- CVE-2026-23881Kyverno Denial of Service via Context Variable Amplification in Policy Engine
- CVE-2026-22039Kyverno Cross-Namespace Privilege Escalation via Policy apiCall
- CVE-2025-47281Kyverno's Improper JMESPath Variable Evaluation Leads to Denial of Service
- CVE-2025-46342Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements
- CVE-2025-29778Kyverno ignores subjectRegExp and IssuerRegExp
- CVE-2024-48921Kyverno's PolicyException objects can be created in any namespace by default
- CVE-2023-47630Attacker can cause Kyverno user to unintentionally consume insecure image
- CVE-2023-42813Denial of service from malicious manifest in kyverno
- CVE-2023-42814Denial of service from malicious image manifest in kyverno
- CVE-2023-42815Denial of service from malicious image manifest in kyverno
- CVE-2023-42816Denial of service from malicious signature in kyverno
- CVE-2023-34091Kyverno resource with a deletionTimestamp may allow policy circumvention
- CVE-2023-33191kyverno seccomp control can be circumvented