GO-2026-4285
NoneCVSS
—
EPSS
—
Published
Jan 12, 2026
CISA due date
—
The record
Bypassing Kyverno Policies via Double Policy Exceptions in github.com/kyverno/kyverno
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/kyverno/kyverno | 1.9.0 | 1.13.0 |
| Chainguard | reports-server-compat | 0 | 0.1.6-r0 |
| go | github.com/kyverno/kyverno | 1.9.0 | 1.13.0 |
Related vulnerabilities
- CVE-2026-22039 Kyverno is a policy engine designed for cloud native platform engineering teams. Also affects github.com/kyverno/kyverno
- CVE-2026-23881 Kyverno is a policy engine designed for cloud native platform engineering teams. Also affects github.com/kyverno/kyverno
- CVE-2025-66564 Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Also affects reports-server-compat
- CVE-2025-66506 Fulcio is a free-to-use certificate authority for issuing code signing certificates for… Also affects reports-server-compat