https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 12:22:07 +0000 https://vulnerability.circl.lu/vuln/bit-kyverno-2026-84195 <p><strong>Affected:</strong> Bitnami: kyverno</p> <p>Kyverno before 1.16.4 automatically attaches the admission controller&#39;s ServiceAccount token to outbound HTTP requests in apiCall service mode without explicit authorization headers. Attackers can exfiltrate the token by directing apiCall requests to external or attacker-controlled endpoints, gaining full control over Kyverno policies and cluster resources.</p> <p><strong>Affected:</strong> Bitnami: kyverno</p> <p>Kyverno before 1.16.4 automatically attaches the admission controller&#39;s ServiceAccount token to outbound HTTP requests in apiCall service mode without explicit authorization headers. Attackers can exfiltrate the token by directing apiCall requests to external or attacker-controlled endpoints, gaining full control over Kyverno policies and cluster resources.</p> https://vulnerability.circl.lu/vuln/bit-kyverno-2026-84195 https://vulnerability.circl.lu/vuln/fkie_cve-2026-84195 <p>Kyverno before 1.16.4 automatically attaches the admission controller&#39;s ServiceAccount token to outbound HTTP requests in apiCall service mode without explicit authorization headers. Attackers can exfiltrate the token by directing apiCall requests to external or attacker-controlled endpoints, gaining full control over Kyverno policies and cluster resources.</p> <p>Kyverno before 1.16.4 automatically attaches the admission controller&#39;s ServiceAccount token to outbound HTTP requests in apiCall service mode without explicit authorization headers. Attackers can exfiltrate the token by directing apiCall requests to external or attacker-controlled endpoints, gaining full control over Kyverno policies and cluster resources.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-84195 https://vulnerability.circl.lu/vuln/ghsa-4x34-82r8-65cf <p>Kyverno before 1.16.4 automatically attaches the admission controller&#39;s ServiceAccount token to outbound HTTP requests in apiCall service mode without explicit authorization headers. Attackers can exfiltrate the token by directing apiCall requests to external or attacker-controlled endpoints, gaining full control over Kyverno policies and cluster resources.</p> <p>Kyverno before 1.16.4 automatically attaches the admission controller&#39;s ServiceAccount token to outbound HTTP requests in apiCall service mode without explicit authorization headers. Attackers can exfiltrate the token by directing apiCall requests to external or attacker-controlled endpoints, gaining full control over Kyverno policies and cluster resources.</p> https://vulnerability.circl.lu/vuln/ghsa-4x34-82r8-65cf