Skip to content
OpenAdvisories

Vendor

kyverno

54 known vulnerabilities.

Products

kyverno 54
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-54523 Public exploit

    Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system

    Kyverno is a policy engine designed for cloud native platform engineering teams. From 1.18.0 until 1.18.2, the NamespacedMutatingPolicy CEL compiler exposes the generator library to matchConditions, allowing a namespace-scoped policy to invoke generator.apply…

    kyverno kyverno kyverno-init-container-1.18 github.com/kyverno/kyverno Wolfi Go