Executive brief
Kubewarden is a policy engine used to manage security and compliance within Kubernetes clusters. A vulnerability in certain deprecated components allows users with the ability to create policies to bypass intended security boundaries and read information about other parts of the cluster. While attackers cannot modify data or access sensitive secrets, they can view network routing rules, service names, and internal IP addresses, potentially aiding in further attacks.
Technical details
A vulnerability exists in the Kubewarden policy-evaluator where three deprecated host-callback APIs (kubernetes/ingresses, kubernetes/namespaces, and kubernetes/services) do not properly enforce namespaced isolation. An attacker with permissions to create or update 'AdmissionPolicy' or 'AdmissionPolicyGroup' resources can craft a malicious policy that invokes these callbacks. This allows the attacker to exfiltrate metadata about cluster resources across all namespaces, including internal topology and routing rules. The issue is rooted in incorrect authorization (CWE-863) within the waPC binding layer. The vulnerability is read-only and does not grant access to Secrets or ConfigMaps. The issue was resolved in version 1.33.0 by removing the deprecated bindings.
Affected products
- Kubewarden Kubewarden Admission Controller 1.6.0 to 1.33.0
Timeline
- 2026-02-26: patched: Deprecated WAPC bindings removed in pull request 1519
- 2026-03-09: advisory: Vendor advisory GHSA-6r7f-3fwq-hq74 published
- 2026-03-10: disclosed: CVE-2026-29773 published