PT-2025-30438 · Kyverno · Kyverno

Thevilledev · Published 2025-07-22 · Updated 2026-04-16 · CVE-2025-47281

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kyverno versions 1.14.1 and below

Description Kyverno is susceptible to a Denial of Service (DoS) vulnerability stemming from improper handling of JMESPath variable substitutions. Attackers possessing permissions to create or update Kyverno policies can exploit this by crafting expressions utilizing the {{@}} variable in conjunction with a pipe and an invalid JMESPath function (e.g., {{@ | non existent function }}). This results in a nil value being substituted into the policy structure. Subsequent processing by the getValueAsStringMap function, which expects string values, triggers a panic due to a type assertion failure. This can crash Kyverno worker threads within the admission controller and cause continuous crashes of the reports controller pod, potentially leading to service degradation or unavailability.

Recommendations Kyverno versions prior to 1.14.2 are affected. Update to version 1.14.2 or later to resolve this issue.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

CWE-248

Related Identifiers

BIT-KYVERNO-2025-47281

CLEANSTART-2026-UQ68343

CVE-2025-47281

ECHO-7558-E0E5-D2B2

GHSA-R5P3-955P-5GGQ

GO-2025-3823

OPENSUSE-SU-2025:15405-1

Affected Products

Kyverno

References · 110

• 🔥 https://github.com/kyverno/kyverno/security/advisories/GHSA-r5p3-955p-5ggq · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47281.json · Exploit
• https://github.com/kyverno/kyverno/commit/cbd7d4ca24de1c55396fc3295e9fc3215832be7c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-32281 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-46342 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-32283 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-22039 · Security Note
• https://osv.dev/vulnerability/GO-2025-3823 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47281 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-34091 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-32289 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33810 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68121 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-32282 · Security Note
• https://osv.dev/vulnerability/GHSA-r5p3-955p-5ggq · Vendor Advisory