CyberRota Analysis
AI-GeneratedKyverno versions prior to 1.16.2 are vulnerable to a server-side request forgery (SSRF) flaw in the APICall feature, allowing users with namespace-level Policy creation permissions to make unauthorized HTTP requests to internal resources. This vulnerability can lead to exposure of sensitive information, such as cloud metadata and other tenants' secrets, due to the misuse of a high-privilege ServiceAccount. Organizations using Kyverno in multi-tenant environments should prioritize patching to mitigate the risk of data breaches and maintain isolation between tenants.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Kyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall feature. The URL field in a Policy's ServiceCall configuration is not validated, so a user with namespace-level Policy creation permissions can direct Kyverno to make HTTP requests to arbitrary internal resources (e.g., cloud metadata endpoints such as 169.254.169.254 or other tenants' resources). Because Kyverno executes these requests using its cluster-wide high-privilege ServiceAccount (a Confused Deputy problem), the responses—potentially including other tenants' secrets and cloud IAM credentials—are returned in the PolicyReport and can be read by the attacker, breaking multi-tenant isolation.