CVE-2026-84199 Kyverno before 1.16.2 SSRF via APICall Feature
Attackers with policy creation rights can exploit SSRF in Kyverno to access internal resources and steal cloud credentials via high-privilege service accounts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-84199?
CVE-2026-84199 is a medium-severity server-side request forgery vulnerability in kyverno, published on 1 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Kyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall feature. The URL field in a Policy's ServiceCall configuration is not validated, so a user with namespace-level Policy creation permissions can direct Kyverno to make HTTP requests to arbitrary internal resources (e.g., cloud metadata endpoints such as 169.254.169.254 or other tenants' resources). Because Kyverno executes these requests using its cluster-wide high-privilege ServiceAccount (a Confused Deputy problem), the responses—potentially including other tenants' secrets and cloud IAM credentials—are returned in the PolicyReport and can be read by the attacker, breaking multi-tenant isolation.
Weakness: CWE-918
Which versions are affected by CVE-2026-84199?
4 open source packages ship an affected version, including github.com/kyverno/kyverno and kyverno.
| Package | Affected | Fixed in |
|---|---|---|
github.com/kyverno/kyverno Go | All versions | 1.16.2 |
github.com/kyverno/kyverno Go | All versions | 1.16.2 |
github.com/kyverno/kyverno Go | All versions | 1.16.2 |
kyverno Bitnami | All versions | 1.16.2 |
How do I fix CVE-2026-84199?
Upgrade github.com/kyverno/kyverno to 1.16.2 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-84199 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-84199 exists.
Sources
Also known as BIT-kyverno-2026-84199, ECHO-3fbf-c265-77f3, GHSA-fmqp-4wfc-w3v7, GHSA-q5v3-pp68-6crj, GO-2026-5371, MINI-23xr-wxc2-3wj8 and 21 more.