Vulnerability · Published Sep 1, 2026 · Assigned by VulnCheck
CVE-2026-84199Kyverno before 1.16.2 SSRF via APICall Feature
High 7.7
In plain English
A high-severity server-side request forgery in kyverno from kyverno. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Kyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall feature. The URL field in a Policy's ServiceCall configuration is not validated, so a user with namespace-level Policy creation permissions can direct Kyverno to make HTTP requests to arbitrary internal resources (e.g., cloud metadata endpoints such as 169.254.169.254 or other tenants' resources). Because Kyverno executes these requests using its cluster-wide high-privilege ServiceAccount (a Confused Deputy problem), the responses—potentially including other tenants' secrets and cloud IAM credentials—are returned in the PolicyReport and can be read by the attacker, breaking multi-tenant isolation.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/kyverno/kyverno | 1.16.2 | GHSA-fmqp-4wfc-w3v7 |
| Go | github.com/kyverno/kyverno | 1.16.2 | GO-2026-5371 |
Affected products (as reported)
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
References
- GitHub Security Advisory (GHSA-fmqp-4wfc-w3v7) vendor-advisory
- VulnCheck Advisory: Kyverno before 1.16.2 SSRF via APICall Feature third-party-advisory