Kyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall feature. (CVE-2026-84199)

The SSRF vulnerability in Kyverno before version 1.16.2 arises from lack of validation on the URL field in a Policy's ServiceCall configuration. An attacker with namespace-level Policy creation rights can exploit this to force Kyverno to make HTTP requests to internal endpoints, including cloud metadata services or other tenants' resources. Since Kyverno executes these requests using a cluster-wide high-privilege ServiceAccount, the responses containing sensitive information are returned in the PolicyReport, allowing the attacker to read secrets and cloud IAM credentials. This is a Confused Deputy problem leading to a breach of multi-tenant isolation.

An attacker with namespace-level Policy creation permissions can exploit this SSRF vulnerability to access sensitive internal resources and secrets, including cloud IAM credentials, by causing Kyverno to make unauthorized HTTP requests. This compromises confidentiality and breaks multi-tenant isolation within the cluster environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict namespace-level Policy creation permissions to trusted users only to reduce the risk of exploitation.