kubewarden vulnerabilities
5 published CVEs name kubewarden among the affected products.
- Published CVEs
- 5
- Last 12 months
- 3
- Critical
- 0
- Known exploited
- 0
Critical 0High 0Medium 5Low 0Not scored 0
CVEs per yearBy the year they were published
- 20252
- 20263
Newest CVEs
- CVE-2026-63121
Kubewarden trusted-repos-policy: uppercase registry host bypasses registry/image deny rules
kubewarden · policies
Medium6.3 - CVE-2026-42541
Kubewarden: RBAC Reconnaissance via unchecked can_i host capability call
kubewarden · kubewarden-controller
Medium4.3 - CVE-2026-29773
kubewarden-controller cross-namespace data exfiltration via deprecated host callback binding
kubewarden · kubewarden-controller
Medium4.3 - CVE-2025-24376
The kubewarden-controller AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources
kubewarden · kubewarden-controller
Medium6.5 - CVE-2025-24784
kubewarden-controller has an Information leak via AdmissionPolicyGroup Resource
kubewarden · kubewarden-controller
Medium4.3