kubewarden vulnerabilities
5 published CVEs name kubewarden among the affected products.
- 5Published CVEs5 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-63121
Kubewarden trusted-repos-policy: uppercase registry host bypasses registry/image deny rules
kubewarden · policies
Medium6.3 - CVE-2026-42541
Kubewarden: RBAC Reconnaissance via unchecked can_i host capability call
kubewarden · kubewarden-controller
Medium4.3 - CVE-2026-29773
kubewarden-controller cross-namespace data exfiltration via deprecated host callback binding
kubewarden · kubewarden-controller
Medium4.3 - CVE-2025-24376
The kubewarden-controller AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources
kubewarden · kubewarden-controller
Medium6.5 - CVE-2025-24784
kubewarden-controller has an Information leak via AdmissionPolicyGroup Resource
kubewarden · kubewarden-controller
Medium4.3