VDB
CVE-2025-46342
CVE-2025-46342
PUBLISHED
CVSS 8.199999809265137 HIGH
Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.13.5 and 1.14.0, it may happen that policy rules using namespace selector(s) in their match statements are mistakenly not applied during admission review request processing due to a missing error propagation in function `GetNamespaceSelectorsFromNamespaceLister` in `pkg/utils/engine/labels.go`. As a consequence, security-critical mutations and validations are bypassed, potentially allowing attackers with K8s API access to perform malicious operations. This issue has been patched in versions 1.13.5 and 1.14.0.
EPSS 0.75% · 53.4th percentile
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H
EPSS Score
0.75%
53.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | kyverno | 0 |
| Bitnami | kyverno | 0 |
Timeline
- Jan 21, 1970 Security Advisory
- Apr 29, 2025 CVE Published
- Apr 30, 2025 PoC Published
- Apr 30, 2025 PoC Published
- Apr 30, 2025 PoC Published
- Apr 30, 2025 PoC Published
- May 1, 2025 EPSS Score
- May 5, 2025 CVE Updated
- May 14, 2025 EPSS Score
- May 26, 2025 EPSS Score
- May 26, 2025 Coalition ESS Score
- Jun 8, 2025 EPSS Score