Attestkeep
Language: English
Sign up

Vulnerabilities / CVE-2026-41323

critical

CVE-2026-41323

Kyverno: ServiceAccount token leaked to external servers via apiCall service URL

Published Modified CWE 200, 918
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.

Severity by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
GHSA8.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Bitnami9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Trivy's own label is CRITICAL. Rated critical by NVD, Bitnami. Rated lower by GHSA (high).

Description

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.18.0-rc1, 1.17.2-rc1, and 1.16.4, Kyverno's apiCall feature in ClusterPolicy automatically attaches the admission controller's ServiceAccount token to outgoing HTTP requests. The service URL has no validation — it can point anywhere, including attacker-controlled servers. Since the admission controller SA has permissions to patch webhook configurations, a stolen token leads to full cluster compromise. Versions 1.18.0-rc1, 1.17.2-rc1, and 1.16.4 patch the issue.

Affected packages and fixed versions

SourcePackageFixed in
bitnami::Bitnami Vulnerability Databasekyverno1.16.4, 1.17.2
chainguardkyverno-1.16, kyverno-1.17, kyverno-fips-1.17 and 2 more1.16.4-r1 and 3 more
go::GitHub Security Advisory Gogithub.com/kyverno/kyverno1.17.0
minimoskyverno-1.16, kyverno-1.17, kyverno-fips-1.16 and 3 more1.16.4-r0 and 2 more
wolfikyverno-1.17, kyverno-notation-aws1.17.2-r1 and 1 more
Show all 15 entries from 5 sources
SourcePackageFixed in
bitnami::Bitnami Vulnerability Databasekyverno1.16.4, 1.17.2
chainguardkyverno-1.161.16.4-r1
chainguardkyverno-1.171.17.2-r1
chainguardkyverno-fips-1.171.17.2-r1
chainguardkyverno-notation-aws1.1-r49
chainguardkyverno-notation-aws-fips1.1-r46
go::GitHub Security Advisory Gogithub.com/kyverno/kyverno1.17.0
minimoskyverno-1.161.16.4-r0
minimoskyverno-1.171.17.2-r0
minimoskyverno-fips-1.161.16.4-r0
minimoskyverno-fips-1.171.17.2-r0
minimoskyverno-notation-aws1.1-r1
minimoskyverno-notation-aws-fips1.1-r1
wolfikyverno-1.171.17.2-r1
wolfikyverno-notation-aws1.1-r49

References

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.