ZeroDay Findings
Sign inSign up

Findings

CVE-2026-4789

Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.

Published Mar 30, 2026 · updated Jun 17, 2026 · kyverno kyverno

Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 30, 2026 · NIST NVD

    Detected

    Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.

Affected

  • cpe kyverno/kyvernoversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-4789

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-4789

    Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.

    nvd.nist.gov

References