# CVE-2026-84200: Kyverno policy bypass via multiple exceptions

Source: https://junglewise.ai/threats/cve-2026-84200-kyverno-policy-bypass-via-multiple-exceptions  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-01. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-84200 · Severity: critical · CVSS 9 · Published 2026-09-01

Kyverno is a policy enforcement tool for Kubernetes clusters used to prevent unauthorized resource configurations. A flaw in its exception handling allows attackers to bypass security policies by crafting resource names that match less restrictive exceptions, potentially enabling forbidden workloads like those with hostPath volume access. This can lead to privilege escalation, data exposure, or operational compromise on affected clusters.

Technologies: [github.com/kyverno/kyverno (Go)](https://junglewise.ai/threats/technologies/github-com-kyverno-kyverno), [Kyverno](https://junglewise.ai/threats/technologies/kyverno). Vendors: [Go](https://junglewise.ai/threats/vendors/go), [Kyverno](https://junglewise.ai/threats/vendors/kyverno).

## Quick answers

**Is CVE-2026-84200 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-84200 being exploited in the wild.

**How severe is CVE-2026-84200?** Critical severity, with a CVSS score of 9, published 1 September 2026.

**Which products and versions are affected?** github.com/kyverno/kyverno (Go) SEMVER:introduced=1.9.0,fixed=1.13.0; Kyverno v1.9.0 through v1.12.7.

**Is there a fix for CVE-2026-84200?** Yes. github.com/kyverno/kyverno (Go): upgrade to 1.13.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-84200 attacked?** It is attacked from the adjacent network.

**Am I affected by CVE-2026-84200?** Check whether you run github.com/kyverno/kyverno (Go) or Kyverno at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- github.com/kyverno/kyverno (Go): upgrade to 1.13.0 or later

  ```sh
  go get github.com/kyverno/kyverno@v1.13.0
  ```


## Technical details

This vulnerability exists in Kyverno's PolicyException handling logic when multiple exceptions are defined for a single enforce-mode policy. The bug causes the engine to incorrectly prioritize a less restrictive exception over a more restrictive one, allowing policy bypass. An attacker with low cluster privileges can craft a resource name matching the second exception's pattern (e.g., containing "ingress") to circumvent security policies such as disallowing hostPath volumes. The flaw requires the attacker to have adjacent network access and low privileges but no user interaction. Patches are available in Kyverno v1.13.0 and later.

## Affected products

- Kyverno Kyverno v1.9.0 through v1.12.7

## Identifiers

- CVE-2026-84200
- GHSA-gg4x-fgg2-h9w9
- GO-2026-4285

## Timeline

- 2026-01-06: disclosed
- 2026-01-06: patched: Patched in v1.13.0
- 2026-09-01: advisory

## References

- [https://github.com/kyverno/kyverno/security/advisories/GHSA-gg4x-fgg2-h9w9](https://github.com/kyverno/kyverno/security/advisories/GHSA-gg4x-fgg2-h9w9)
- [https://www.vulncheck.com/advisories/kyverno-before-1.13.0-policy-bypass-via-multiple-exceptions](https://www.vulncheck.com/advisories/kyverno-before-1.13.0-policy-bypass-via-multiple-exceptions)

## Related threats

- [Kyverno authorization bypass in generate rule validation](https://junglewise.ai/threats/cve-2026-124441-kyverno-before-1-19-2-contains-an-authorization-bypass)
- [Kyverno apiCall authorization bypass in namespace clamp](https://junglewise.ai/threats/cve-2026-124440-kyverno-from-1-19-1-before-1-19-2-contains-an-authorization)
- [Kyverno unbounded decompression in notary signature fetch](https://junglewise.ai/threats/cve-2026-122323-kyverno-from-1-11-0-before-1-19-2-contains-an-unbounded)
- [Kyverno verifyImages signature verification bypass via cache](https://junglewise.ai/threats/cve-2026-122321-kyverno-1-18-0-before-1-19-2-contains-a-signature-verification)
- [Kyverno missing authorization in generate.clone namespace](https://junglewise.ai/threats/cve-2026-122320-kyverno-before-1-19-2-contains-a-missing-authorization)