Kyverno before 1.16.4 automatically attaches the admission controller's ServiceAccount token to outbound HTTP requests in apiCall service mode… (CVE-2026-84195)

Kyverno before version 1.16.4 automatically includes the admission controller's ServiceAccount token in outbound HTTP requests made in apiCall service mode without requiring explicit authorization headers. This flaw enables attackers to trick the system into sending the token to external or malicious endpoints, which can then be used to fully control Kyverno policies and manipulate cluster resources. The vulnerability is identified as CVE-2026-84195 and has a CVSS 3.1 base score of 7.7, indicating high severity. No known exploits in the wild have been reported, and no patch links or vendor advisories are provided in the input data.

If exploited, attackers can exfiltrate the admission controller's ServiceAccount token, granting them full control over Kyverno policies and the ability to manipulate cluster resources. This can lead to unauthorized policy changes and potential compromise of the Kubernetes cluster environment. The vulnerability has a high severity rating with a CVSS score of 7.7, reflecting the significant confidentiality impact and the potential for privilege escalation within the cluster.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, avoid exposing apiCall service mode to untrusted or external endpoints to prevent token exfiltration.