Vulnerability in Kyverno

CVE-2026-4789

Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.

EPSS: 0.000 (6.3th percentile) — read the EPSS interpretation.

Affected products

References