Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/kyverno/kyverno | go | >= 1.16.0, < 1.17.0 | 1.17.0 |
Miggo AIRoot Cause AnalysisThe vulnerability is a Server-Side Request Forgery (SSRF) within the Kyverno policy engine. It exists because the http.Get and http.Post functions, provided by Kyverno's CEL integration (pkg/cel/libs/http/http.go), do not perform any validation or restriction on the URLs they are asked to request. An attacker with the ability to create or modify Kyverno policies (specifically NamespacedValidatingPolicy and other namespaced policy types) can use these functions to make arbitrary HTTP requests from the Kyverno admission controller's pod. This allows for scanning internal networks, accessing sensitive endpoints like the cloud metadata service (e.g., 169.254.169.254), and exfiltrating the response data through policy error messages. The patch identified does not fix the underlying lack of validation in the HTTP functions themselves. Instead, it provides a mitigation by restricting the availability of the entire HTTP library (http.Lib) to only cluster-scoped policies, removing the attack vector for users who only have permissions to manage namespaced policies.
