EUVD-2026-17241
GHSA-qqrv-2hch-83q4
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft malicious Kyverno policy with CEL HTTP function
-
DeliverySubmit policy to cluster
-
ExploitCEL evaluates unrestricted HTTP request
-
ExecutionAccess internal services or metadata endpoints
-
ImpactExfiltrate sensitive data or modify resources
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V4 - API and Web Service URL allowlisting, SSRF prevention
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Credential Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Kyverno versions 1.16.0 and later with CEL expressions enabled in policies. Remote unauthenticated attacker can exploit via policy creation/modification. No user interaction required. Requires cluster access to submit malicious policies. |
| Impact | Without CVSS vector, EPSS score, or KEV confirmation, the real-world severity cannot be definitively quantified from standard metrics. However, the vulnerability characteristics suggest significant practical risk: Kyverno runs with cluster-admin or high-privilege service account credentials, making it a valuable SSRF target; cluster metadata and API server access could lead to privilege escalation or cluster compromise; the vulnerability requires policy deployment (not purely unauthenticated external access), which slightly reduces immediate exposure but does not eliminate it if policies are auto-provisioned or user-configurable. The absence of public exploit confirmation (no POC noted) and lack of active KEV status suggest this may be relatively nascent or narrowly exploitable in specific configurations, but organizations using Kyverno with untrusted or user-supplied policy definitions face elevated risk. |
| Exploit ScenarioDerived | A cluster operator deploys a user-submitted or externally-sourced Kyverno policy containing a malicious CEL expression that invokes unrestricted HTTP functions. When Kyverno evaluates the policy during admission control, the controller issues a request to http://169.254.169.254/latest/meta-data (AWS metadata) or the Kubernetes API server's internal endpoint, allowing the attacker to enumerate cluster secrets, service account tokens, or other sensitive configuration. The attacker gains these details without direct Kubernetes API authentication, effectively using Kyverno as an SSRF proxy. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 30, 2026
Kyverno versions 1.16.0 and later contain a server-side request forgery vulnerability in unrestricted CEL HTTP functions that allow attackers to make arbitrary HTTP requests from the Kyverno controller, potentially accessing internal services and metadata endpoints. The vulnerability affects Kubernetes clusters running vulnerable Kyverno versions with policies utilizing CEL-based HTTP operations, with no CVSS or EPSS data currently available to quantify severity.
RemediationAI
Upgrade Kyverno to a patched version released after the vulnerability disclosure; consult the official Kyverno GitHub releases and CERT advisory for the specific minimum fixed version. As an interim mitigation, restrict policy definitions to trusted authors only, disable or sandbox CEL HTTP functions if Kyverno configuration allows, implement network policies to limit outbound HTTP/HTTPS traffic from Kyverno controller pods to only necessary endpoints, and audit existing policies for suspicious HTTP operations. Additional guidance is available in the CERT advisory at https://kb.cert.org/vuls/id/655822.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 2 packages in go, euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Kyverno is a Kubernetes-native policy engine that uses Common Expression Language (CEL) for policy evaluation. The vulnerability stems from insufficient input validation or authorization controls on CEL HTTP functions, which are likely implemented as part of Kyverno's policy validation framework. When policies evaluate untrusted input or user-controlled values through CEL HTTP operations, an attacker can craft policy expressions that cause the Kyverno controller to issue requests to arbitrary URLs, including internal Kubernetes API servers, cloud metadata services (AWS IMDSv1, GCP metadata), or other backend systems not intended for external access. This is a classic SSRF pattern where a trusted service (Kyverno running with elevated cluster permissions) becomes a pivot point for accessing restricted network resources.
Know when Kyverno gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD.
CVSS VectorNVD
DescriptionCVE.org
Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Server-Side Request Forgery exploits applications that fetch remote resources based on user-supplied URLs.
Kyverno Kubernetes policy engine prior to 1.x has a privilege escalation vulnerability (CVSS 9.9) allowing policy bypass
Cross-namespace privilege escalation in Kyverno 1.18.0-1.18.1 lets any tenant who can create a NamespacedMutatingPolicy
Kyverno is a policy engine designed for Kubernetes. Rated high severity (CVSS 8.7), this vulnerability is remotely explo
Kyverno is a policy engine designed for cloud native platform engineering teams. Rated high severity (CVSS 8.5), this vu
Kyverno versions up to 1.16.3 is affected by allocation of resources without limits or throttling (CVSS 7.7).
Kyverno is a policy engine designed for cloud native platform engineering teams. Rated medium severity (CVSS 5.8), this
Privilege escalation in Kyverno before 1.19.1 allows an authenticated Kubernetes namespace tenant with Policy/apiCall au
Policy enforcement bypass in Kyverno v1.9.0 through v1.12.7 lets an authenticated Kubernetes user evade an enforce-mode
Kyverno is a policy engine designed for Kubernetes. Rated high severity (CVSS 8.8), this vulnerability is remotely explo
Cross-namespace information disclosure in Kyverno before 1.19.1 allows an authenticated low-privilege tenant to read res
Credential leakage in Kyverno's apiCall service mode automatically forwards the Kubernetes admission controller's Servic
Server-side request forgery in Kyverno's Kubernetes admission controller (all versions before 1.18.0) enables any authen
Exploit-DB