Vendor

    Kubewarden

    5 known vulnerabilities in products by Kubewarden, 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Kubewarden
    MediumCVE-2026-63121

    Kubewarden trusted-repos-policy: uppercase registry host bypasses registry/image deny rules

    6.3
    MediumCVE-2025-24376

    Kubewarden-controller: Improper Neutralization of Wildcards or Matching Symbols

    also in 1 other product

    6.5
    MediumCVE-2026-42541

    Kubewarden: RBAC Reconnaissance via unchecked can_i host capability call

    also in 1 other product

    4.3
    MediumCVE-2026-29773

    kubewarden-controller cross-namespace data exfiltration via deprecated host callback binding

    also in 2 other products

    4.3
    MediumCVE-2025-24784

    kubewarden-controller has an Information leak via AdmissionPolicyGroup Resource

    also in 1 other product

    4.3

    Products

    Products by Kubewarden
    Kubewarden-controller40