{"cve":"CVE-2026-84199","nvd":{"published":"2026-09-01T12:17:49.407","modified":"2026-10-08T16:17:54.930","status":"Awaiting Analysis","description":"Kyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall feature. The URL field in a Policy's ServiceCall configuration is not validated, so a user with namespace-level Policy creation permissions can direct Kyverno to make HTTP requests to arbitrary internal resources (e.g., cloud metadata endpoints such as 169.254.169.254 or other tenants' resources). Because Kyverno executes these requests using its cluster-wide high-privilege ServiceAccount (a Confused Deputy problem), the responses—potentially including other tenants' secrets and cloud IAM credentials—are returned in the PolicyReport and can be read by the attacker, breaking multi-tenant isolation.","cvss_v4":{"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L","score":6.9},"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","score":7.7},"cwes":["CWE-918"],"references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-fmqp-4wfc-w3v7","https://www.vulncheck.com/advisories/kyverno-before-1.16.2-ssrf-via-apicall-feature","https://github.com/kyverno/kyverno/security/advisories/GHSA-fmqp-4wfc-w3v7"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:50:50.842544443+00:00"},"epss":{"cve":"CVE-2026-84199","score":0.00357,"percentile":0.29174,"date":"2026-10-25"},"kev":null,"osv":[{"id":"GHSA-fmqp-4wfc-w3v7","url":"https://osv.dev/vulnerability/GHSA-fmqp-4wfc-w3v7","summary":"Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach","modified":"2026-10-14T11:11:05.346356935Z","packages":[{"ecosystem":"Go","name":"github.com/kyverno/kyverno","purl":"pkg:golang/github.com/kyverno/kyverno","ranges":["<1.16.2"],"fixed":["1.16.2"]}]},{"id":"GO-2026-5371","url":"https://osv.dev/vulnerability/GO-2026-5371","summary":"Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyverno","modified":"2026-10-14T11:11:05.346356935Z","packages":[{"ecosystem":"Go","name":"github.com/kyverno/kyverno","purl":"pkg:golang/github.com/kyverno/kyverno","ranges":["<1.16.2"],"fixed":["1.16.2"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}