Detections
Analytics
CVE-2026-4789
critical
Description
Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.
References
Details
Published: 2026-03-30
Updated: 2026-04-03
Named Vulnerability: GO-2026-5621Named Vulnerability: GHSA-rggm-jjmc-3394Named Vulnerability: GHSA-qqrv-2hch-83q4
Risk Information
CVSS v2
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Severity: Critical
CVSS v3
Base Score: 9.8
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: Critical
EPSS
EPSS: 0.00653