Kkubewarden

Products

Exploited and recent CVEs

• CVE-2026-63121 Medium 6.3 Kubewarden trusted-repos-policy: uppercase registry host bypasses registry/image deny rules 0.2%
• CVE-2026-42541 Medium 4.3 Kubewarden: RBAC Reconnaissance via unchecked can_i host capability call 0.2%
• CVE-2026-29773 Medium 4.3 kubewarden-controller cross-namespace data exfiltration via deprecated host callback binding 0.2%
• CVE-2025-24376 Medium 6.5 The kubewarden-controller AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources 0.3%
• CVE-2025-24784 Medium 4.3 kubewarden-controller has an Information leak via AdmissionPolicyGroup Resource 0.3%