What’s Vulnerable › Products

kubewarden-controller vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your kubewarden-controller version is affected

Latest kubewarden-controller vulnerabilities

• CVE-2026-42541 — Kubewarden: RBAC Reconnaissance via unchecked can_i host capability call (CVSS 4.3)
• CVE-2026-29773 — kubewarden-controller cross-namespace data exfiltration via deprecated host callback binding (CVSS 4.3)
• CVE-2025-24784 — kubewarden-controller has an Information leak via AdmissionPolicyGroup Resource (CVSS 4.3)
• CVE-2025-24376 — The kubewarden-controller AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources (CVSS 6.5)