Threat Intelligence Database

Kyverno versions prior to 1.19.1 have a namespace isolation bypass vulnerability in the apiCall context entry of namespaced Policy resources. This occurs due to inconsistent path interpretation between validation and execution, allowing a low-privilege tenant to use percent-encoded dot-segments in the urlPath to bypass namespace checks. Exploitation enables reading resources from other namespaces using the Kyverno admission controller's ServiceAccount credentials.

Kyverno versions before 1.19.1 contain a critical vulnerability in the validation of URL-encoded path segments within the Policy apiCall urlPath. This flaw allows namespace tenants to bypass namespace restrictions and create objects in other namespaces using percent-encoded directory traversal sequences. Exploitation can lead to creation of MutatingWebhookConfiguration objects cluster-wide or PolicyException objects in the kyverno namespace, resulting in privilege escalation to cluster admin.

Kyverno versions 1.16.0 through 1.19.0 have a vulnerability where the globalcontext.Lib CEL library is registered in the policy environment without namespace confinement. This allows a tenant with permission to create namespaced policies to access cached cluster-scoped global context entries, including data from namespaces they do not have RBAC permissions to read. The issue is fixed in version 1.19.1.

Kyverno versions 1.14.0 through 1.19.0 contain a vulnerability in the ImageValidatingPolicy evaluator where it fails to properly read the spec.images and spec.allowedValues fields of a PolicyException. This causes image signature verification to be skipped for all images in a matched resource when an exception is intended only for specific images, allowing unsigned or untrusted images to be admitted without verification. The issue is resolved in version 1.19.1.

Kyverno versions prior to 1.19.1 contain a server-side request forgery (SSRF) vulnerability. This issue arises because certain legacy API call paths do not enforce egress filtering or validate service URLs, allowing crafted policies or resource submitters to make Kyverno send HTTP requests to arbitrary internal or external hosts. The vulnerability can lead to unauthorized access to cloud metadata endpoints and internal services using Kyverno's network privileges. The flaw is fixed in version 1.19.1.