CVE-2026-41323 Kyverno: ServiceAccount token leaked to external servers via apiCall service URL
Attackers can steal ServiceAccount tokens via unvalidated apiCall URLs, leading to full Kubernetes cluster compromise.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-41323?
CVE-2026-41323 is a high-severity server-side request forgery vulnerability in kyverno, published on 24 Apr 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.18.0-rc1, 1.17.2-rc1, and 1.16.4, Kyverno's apiCall feature in ClusterPolicy automatically attaches the admission controller's ServiceAccount token to outgoing HTTP requests. The service URL has no validation — it can point anywhere, including attacker-controlled servers. Since the admission controller SA has permissions to patch webhook configurations, a stolen token leads to full cluster compromise. Versions 1.18.0-rc1, 1.17.2-rc1, and 1.16.4 patch the issue.
Which versions are affected by CVE-2026-41323?
4 open source packages ship an affected version, including github.com/kyverno/kyverno and kyverno. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
github.com/kyverno/kyverno Go | All versions | 1.17.0 |
github.com/kyverno/kyverno Go | All versions | 1.17.0 |
github.com/kyverno/kyverno Go | All versions | 1.17.0 |
kyverno Bitnami | All versions | 1.16.4, 1.17.2 |
Products include Kyverno Kyverno.
How do I fix CVE-2026-41323?
Upgrade github.com/kyverno/kyverno to 1.17.0 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-41323 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-41323 exists.
Other vulnerabilities in kyverno
- CVE-2026-22039 Kyverno Cross-Namespace Privilege Escalation via Policy apiCall
- CVE-2026-4789 CVE-2026-4789
- CVE-2025-46342 Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements
- CVE-2026-40868 kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token
- CVE-2022-47633 kyverno verifyImages rule bypass possible with malicious proxy/registry
Sources
Also known as BIT-kyverno-2026-41323, ECHO-c76c-b1c4-8843, GHSA-f9g8-6ppc-pqq4, GO-2026-5351, MINI-4vhr-7vhf-hw33, MINI-68vw-hcv3-3rmq and 13 more.