{"id":"CVE-2026-40868","sourceIdentifier":"security-advisories@github.com","published":"2026-04-21T19:16:18.420","lastModified":"2026-11-11T23:10:00.263","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 1.16.4, kyverno’s apiCall servicecall helper implicitly injects Authorization: Bearer ... using the kyverno controller serviceaccount token when a policy does not explicitly set an Authorization header. Because context.apiCall.service.url is policy-controlled, this can send the kyverno serviceaccount token to an attacker-controlled endpoint (confused deputy). Namespaced policies are blocked from servicecall usage by the namespaced urlPath gate in pkg/engine/apicall/apiCall.go, so this report is scoped to ClusterPolicy and global context usage. This vulnerability is fixed in 1.16.4."},{"lang":"es","value":"Kyverno es un motor de políticas diseñado para equipos de ingeniería de plataformas nativas de la nube. Antes de la versión 1.16.4, el asistente apiCall servicecall de Kyverno inyecta implícitamente Authorization: Bearer ... utilizando el token de cuenta de servicio del controlador de Kyverno cuando una política no establece explícitamente un encabezado de autorización. Debido a que context.apiCall.service.url está controlado por políticas, esto puede enviar el token de cuenta de servicio de Kyverno a un endpoint controlado por un atacante (delegado confundido). Las políticas con espacio de nombres están bloqueadas para el uso de servicecall por la puerta urlPath con espacio de nombres en pkg/engine/apicall/apiCall.go, por lo que este informe se limita al uso de ClusterPolicy y contexto global. Esta vulnerabilidad se corrige en la versión 1.16.4."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"kyverno","product":"kyverno","versions":[{"version":"< 1.16.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-22T13:34:55.762312Z","id":"CVE-2026-40868","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-922"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kyverno:kyverno:*:*:*:*:*:*:*:*","versionEndExcluding":"1.16.4","matchCriteriaId":"380BEA9B-8371-4EA9-A225-86EBBE80F50F"}]}]}],"references":[{"url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-q93q-v844-jrqp","source":"security-advisories@github.com","tags":["Exploit","Mitigation","Vendor Advisory"]},{"url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-q93q-v844-jrqp","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Mitigation","Vendor Advisory"]}]}