CVE-2025-24376: GO-2025-3434 - KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubeward

CVE-2025-24376 · Severity: low · CVSS 3.1 · Published 2025-02-04

Technologies: github.com/kubewarden/kubewarden-controller (Go). Vendors: Go.

Executive brief

KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller

Affected products

Go github.com/kubewarden/kubewarden-controller

Related threats

Kubewarden Missing Authorization in can_i host callback
Kubewarden incorrect authorization in deprecated host-callback APIs
GO-2025-3435 - Kubewarden-Controller information leak via AdmissionPolicyGroup Resource in github.com/kubewarden/kubewarden-controller