Kyverno vulnerabilities
We track 43 vulnerabilities in Kyverno products. 43 are rated high or critical, and none are known to be exploited. The most recent was published on November 8, 2026.
Latest Kyverno vulnerabilities
- 7.1 High severity
kyverno: Insufficient Verification of Data Authenticity
Kyverno is a policy engine designed for Kubernetes. An issue was found in Kyverno that allowed an attacker to control the digest of images used by Kyverno users. The issue would require the attacker to compromise the registry that the Kyverno users fetch their
- 8.8 High severity
kyverno: Improper Access Control
Kyverno is a policy engine designed for Kubernetes. Kyverno seccomp control can be circumvented. Users of the podSecurity `validate.podSecurity` subrule in Kyverno 1.9.2 and 1.9.3 are vulnerable. This issue was patched in version 1.9.4.
- 8.1 High severity
Kyverno: Improper Authentication
An image signature validation bypass vulnerability in Kyverno 1.8.3 and 1.8.4 allows a malicious image registry (or a man-in-the-middle attacker) to inject unsigned arbitrary container images into a protected Kubernetes cluster. This is fixed in 1.8.5. This ha