CVE-2023-47630 Attacker can cause Kyverno user to unintentionally consume insecure image

What is CVE-2023-47630?

CVE-2023-47630 is a high-severity vulnerability in kyverno, published on 14 Nov 2023. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

Kyverno is a policy engine designed for Kubernetes. An issue was found in Kyverno that allowed an attacker to control the digest of images used by Kyverno users. The issue would require the attacker to compromise the registry that the Kyverno users fetch their images from. The attacker could then return an vulnerable image to the the user and leverage that to further escalate their position. As such, the attacker would need to know which images the Kyverno user consumes and know of one of multiple exploitable vulnerabilities in previous digests of the images. Alternatively, if the attacker has compromised the registry, they could craft a malicious image with a different digest with intentionally placed vulnerabilities and deliver the image to the user. Users pulling their images by digests and from trusted registries are not impacted by this vulnerability. There is no evidence of this being exploited in the wild. The issue has been patched in 1.10.5. All users are advised to upgrade. There are no known workarounds for this vulnerability.

Weakness: CWE-345

Which versions are affected by CVE-2023-47630?

4 open source packages ship an affected version, including github.com/kyverno/kyverno and kyverno. It affects 1 product.

Products include Kyverno Kyverno.

How do I fix CVE-2023-47630?

Upgrade github.com/kyverno/kyverno to 1.10.5 or later.

Is CVE-2023-47630 being exploited?

There is no known exploitation of CVE-2023-47630 in the wild and no public exploit code.

Other vulnerabilities in kyverno

• CVE-2026-22039 Kyverno Cross-Namespace Privilege Escalation via Policy apiCall Critical 10.0
• CVE-2026-4789 CVE-2026-4789 Critical 9.8
• CVE-2025-46342 Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements High 8.6
• CVE-2026-41323 Kyverno: ServiceAccount token leaked to external servers via apiCall service URL High 8.1
• CVE-2026-40868 kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as BIT-kyverno-2023-47630, CLEANSTART-2025-NY44240, CLEANSTART-2026-LU55678, GHSA-3hfq-cx9j-923w, GO-2023-2340.