CVE-2026-84195: Kyverno before 1.16.4 Credential Leak via apiCall

Severity: high (CVSS 7.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-01 · updated 2026-09-10
Weakness: CWE-200

Description

Kyverno before 1.16.4 automatically attaches the admission controller's ServiceAccount token to outbound HTTP requests in apiCall service mode without explicit authorization headers. Attackers can exfiltrate the token by directing apiCall requests to external or attacker-controlled endpoints, gaining full control over Kyverno policies and cluster resources.

Affected products

kyverno: before 1.16.4 — fixed in 1.16.4

How to fix

Upgrade to a fixed version: kyverno 1.16.4. Check the vendor advisory for mitigations.

References

https://github.com/kyverno/kyverno/security/advisories/GHSA-8wfp-579w-6r25
https://www.vulncheck.com/advisories/kyverno-before-1.16.4-credential-leak-via-apicall
https://github.com/kyverno/kyverno/security/advisories/GHSA-8wfp-579w-6r25

Get alerted when CVE-2026-84195 or the next vulnerability affects your stack