CVE-2026-84199 kyverno CVE debrief

Who should care

Defenders responsible for managing Kyverno deployments, especially those in multi-tenant environments, should assess exposure and prioritize remediation to prevent potential SSRF attacks.

Why it matters

This SSRF vulnerability in Kyverno before 1.16.2 allows attackers to access internal resources and potentially sensitive information, breaking multi-tenant isolation. Defenders should verify exposure, restrict Policy creation permissions, and consider upgrading to version 1.16.2 or later.

• Potential exposure of sensitive information, including secrets and cloud IAM credentials.
• Breakage of multi-tenant isolation due to unauthorized access to internal resources.
• Possible lateral movement within the network if exploitation occurs.
• Verification of Kyverno version and configuration to ensure mitigation.

Technical summary

The APICall feature in Kyverno before 1.16.2 does not validate the URL field in a Policy's ServiceCall configuration, allowing a user with namespace-level Policy creation permissions to direct Kyverno to make HTTP requests to arbitrary internal resources, potentially including cloud metadata endpoints or other tenants' resources. This could lead to unauthorized access to sensitive information and break multi-tenant isolation. Defenders should verify exposure, restrict Policy creation permissions, and consider upgrading to version 1.16.2 or later.

Defensive priority

Defenders should prioritize verifying exposure and assessing the impact of this vulnerability on their systems, especially those using Kyverno for policy management.

Recommended defensive actions

• Verify the version of Kyverno in use and assess exposure to this vulnerability.
• Restrict Policy creation permissions to prevent exploitation.
• Implement additional monitoring to detect potential SSRF attacks.
• Upgrade to Kyverno version 1.16.2 or later.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and source item provide details about the SSRF vulnerability in Kyverno before 1.16.2. The vendor has provided an advisory on GitHub, and additional information is available from VulnCheck.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.