CVE-2023-33191

MEDIUM

Kyverno <1.9.4 - Privilege Escalation

Title source: llm

Description

Kyverno is a policy engine designed for Kubernetes. Kyverno seccomp control can be circumvented. Users of the podSecurity `validate.podSecurity` subrule in Kyverno 1.9.2 and 1.9.3 are vulnerable. This issue was patched in version 1.9.4.

References (3)

Scores

CVSS v3 4.6
EPSS 0.0017
EPSS Percentile 37.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-284
Status published
Products (2)
kyverno/kyverno 1.9.2 - 1.9.4Go
nirmata/kyverno 1.9.2 - 1.9.4
Published May 30, 2023
Tracked Since Feb 18, 2026