CVE-2026-84199

Kyverno before 1.16.2 is affected by a server-side request forgery (SSRF) vulnerability in its APICall feature. The URL field in a Policy's ServiceCall configuration is not validated , allowing a user with namespace-level Policy creation permissions to direct Kyverno to make HTTP requests to arbi...