CVE-2026-78427

NeuVector's admission webhook contains a bypass vulnerability where containers whose image path matches one of three hardcoded service mesh sidecar images are silently excluded from policy evaluation. Since the image path is fully controlled by the workload author, any user with permission to dep...