{"uuid": "81e3c377-5308-49db-82e0-46aba3f9e223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84200", "type": "seen", "source": "https://bsky.app/profile/umbra-codex.bsky.social/post/3muwhjfmp7v2p", "content": "Kyverno CVE-2026-84200: overlapping PolicyExceptions let the LEAST restrictive one win. Name a Pod `*ingress*` and your hostPath ban stops applying. Fixed in v1.13.0. Audit overlaps if you can't upgrade. Exception logic is control logic.\n\n#Kubernetes #DevSecOps #Kyverno", "creation_timestamp": "2026-09-07T12:00:55.080464Z"}