PatchTheCVEkyverno vulnerabilities and fixes
Recent CVEs affecting kyverno, with upgrade or downgrade steps. 4 tracked.
kyverno has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-04-24. Highest priority: CVE-2026-41323 (score 45/100).
- CVE-2026-41485 HIGH 7.7 UPGRADE Kyverno is a policy engine designed for cloud native platform engineering teams
- CVE-2026-41323 HIGH 8.1 UPGRADE Kyverno is a policy engine designed for cloud native platform engineering teams
- CVE-2026-41068 HIGH 7.7 UPGRADE Kyverno is a policy engine designed for cloud native platform engineering teams
- CVE-2026-40868 HIGH 8.1 UPGRADE Kyverno is a policy engine designed for cloud native platform engineering teams
FAQ
How do I fix kyverno vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kyverno being exploited right now?
None of the tracked kyverno CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kyverno CVE should I patch first?
CVE-2026-41323 currently ranks highest (45/100): Kyverno is a policy engine designed for cloud native platform engineering teams.