GO-2025-3434 KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller

🗓️ 04 Feb 2025 22:06:11Reported by GoogleType

osv

osv🔗 osv.dev👁 18 Views

KubeWarden's policies alter PolicyReport resources in kubewarden-controller repository.

Reporter	Title	Published	Views	Family All 42
BDU FSTEC	The vulnerability of the AdmissionPolicy and AdmissionPolicyGroup settings of the Kubernetes cluster’s kubewarden-controller controller allows a malicious actor to gain unauthorized access to modify data or expose protected information.	5 Jun 202500:00	–	bdu_fstec
Circl	CVE-2025-24376	30 Jan 202515:58	–	circl
CNNVD	kubewarden-controller 安全漏洞	30 Jan 202500:00	–	cnnvd
CVE	CVE-2025-24376	30 Jan 202515:51	–	cve
Cvelist	CVE-2025-24376 The kubewarden-controller AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources	30 Jan 202515:51	–	cvelist
EUVD	EUVD-2025-0156	3 Oct 202520:07	–	euvd
Github Security Blog	KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources	30 Jan 202517:52	–	github
NVD	CVE-2025-24376	30 Jan 202516:15	–	nvd
OpenVAS	openSUSE Security Advisory (SUSE-SU-2025:0429-1)	18 Feb 202500:00	–	openvas
OSV	CVE-2025-24376 The kubewarden-controller AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources	30 Jan 202515:51	–	osv

Source	Link
github	www.github.com/kubewarden/kubewarden-controller/security/advisories/GHSA-fc89-jghx-8pvg
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-24376
github	www.github.com/kubewarden/kubewarden-controller/commit/8124039b5f0c955d0ee8c8ca12d4415282f02d2c

03 Mar 2026 04:56Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5

EPSS0.00321

SSVC

kubewarden policies admissionpolicy policyreport resources kubewarden-controller repository