Kyverno Multiple Vulnerabilities, CVSS 8.1, Remote Attack, Privilege Escalation

CERT-Bund issued advisory WID-SEC-2026-1152 disclosing multiple high-severity vulnerabilities in Kyverno, an open-source policy engine for Kubernetes. The flaws carry CVSS Base Score 8.1 and enable authenticated remote attackers to disclose information, bypass security controls, manipulate data, and escalate privileges. Affected versions include Open Source Kyverno <=1.17.0 and <1.16.4.\n\nOrganizations running vulnerable Kyverno versions in Kubernetes environments should evaluate applying available mitigations and monitor for security updates. These vulnerabilities affect cloud-native infrastructure components and could expose sensitive cluster configurations and data to unauthorized access.