CVE-2026-29773

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-29773", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-03-04T16:26:02.897Z", "datePublished": "2026-03-09T22:23:57.793Z", "dateUpdated": "2026-03-10T14:31:47.680Z"}, "containers": {"cna": {"title": "kubewarden-controller cross-namespace data exfiltration via deprecated host callback binding", "problemTypes": [{"descriptions": [{"cweId": "CWE-863", "lang": "en", "description": "CWE-863: Incorrect Authorization", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/kubewarden/kubewarden-controller/security/advisories/GHSA-6r7f-3fwq-hq74", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/kubewarden/kubewarden-controller/security/advisories/GHSA-6r7f-3fwq-hq74"}, {"name": "https://github.com/kubewarden/kubewarden-controller/pull/1519", "tags": ["x_refsource_MISC"], "url": "https://github.com/kubewarden/kubewarden-controller/pull/1519"}, {"name": "https://github.com/kubewarden/kubewarden-controller/commit/4e41b60ae44902d82d94101bac93fb77cae65651", "tags": ["x_refsource_MISC"], "url": "https://github.com/kubewarden/kubewarden-controller/commit/4e41b60ae44902d82d94101bac93fb77cae65651"}], "affected": [{"vendor": "kubewarden", "product": "kubewarden-controller", "versions": [{"version": "< 1.33.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-09T22:24:55.471Z"}, "descriptions": [{"lang": "en", "value": "Kubewarden is a policy engine for Kubernetes. Kubewarden cluster operators can grant permissions to users to deploy namespaced AdmissionPolicies and AdmissionPolicyGroups in their Namespaces. One of Kubewarden promises is that configured users can deploy namespaced policies in a safe manner, without privilege escalation. An attacker with privileged \"AdmissionPolicy\" create permissions (which isn't the default) could make use of 3 deprecated host-callback APIs: kubernetes/ingresses, kubernetes/namespaces, kubernetes/services. The attacker can craft a policy that exercises these deprecated API calls and would allow them read access to Ingresses, Namespaces, and Services resources respectively. \nThis attack is read-only, there is no write capability and no access to Secrets, ConfigMaps, or other resource types beyond these three."}], "source": {"advisory": "GHSA-6r7f-3fwq-hq74", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-10T14:31:41.500373Z", "id": "CVE-2026-29773", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-10T14:31:47.680Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-29773", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-10T14:31:41.500373Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-10T14:31:43.891Z"}}], "cna": {"title": "kubewarden-controller cross-namespace data exfiltration via deprecated host callback binding", "source": {"advisory": "GHSA-6r7f-3fwq-hq74", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "kubewarden", "product": "kubewarden-controller", "versions": [{"status": "affected", "version": "< 1.33.0"}]}], "references": [{"url": "https://github.com/kubewarden/kubewarden-controller/security/advisories/GHSA-6r7f-3fwq-hq74", "name": "https://github.com/kubewarden/kubewarden-controller/security/advisories/GHSA-6r7f-3fwq-hq74", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/kubewarden/kubewarden-controller/pull/1519", "name": "https://github.com/kubewarden/kubewarden-controller/pull/1519", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/kubewarden/kubewarden-controller/commit/4e41b60ae44902d82d94101bac93fb77cae65651", "name": "https://github.com/kubewarden/kubewarden-controller/commit/4e41b60ae44902d82d94101bac93fb77cae65651", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Kubewarden is a policy engine for Kubernetes. Kubewarden cluster operators can grant permissions to users to deploy namespaced AdmissionPolicies and AdmissionPolicyGroups in their Namespaces. One of Kubewarden promises is that configured users can deploy namespaced policies in a safe manner, without privilege escalation. An attacker with privileged \"AdmissionPolicy\" create permissions (which isn't the default) could make use of 3 deprecated host-callback APIs: kubernetes/ingresses, kubernetes/namespaces, kubernetes/services. The attacker can craft a policy that exercises these deprecated API calls and would allow them read access to Ingresses, Namespaces, and Services resources respectively. \nThis attack is read-only, there is no write capability and no access to Secrets, ConfigMaps, or other resource types beyond these three."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-863", "description": "CWE-863: Incorrect Authorization"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-09T22:24:55.471Z"}}}, "cveMetadata": {"cveId": "CVE-2026-29773", "state": "PUBLISHED", "dateUpdated": "2026-03-10T14:31:47.680Z", "dateReserved": "2026-03-04T16:26:02.897Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-03-09T22:23:57.793Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "kubewarden-controller", "vendor": "kubewarden", "versions": [{"status": "affected", "version": "< 1.33.0"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:linuxfoundation:kubewarden:*:*:*:*:*:kubernetes:*:*", "matchCriteriaId": "678673D0-E5E1-4900-BEF8-1847CD413034", "versionEndExcluding": "1.33.0", "versionStartIncluding": "1.6.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Kubewarden is a policy engine for Kubernetes. Kubewarden cluster operators can grant permissions to users to deploy namespaced AdmissionPolicies and AdmissionPolicyGroups in their Namespaces. One of Kubewarden promises is that configured users can deploy namespaced policies in a safe manner, without privilege escalation. An attacker with privileged \"AdmissionPolicy\" create permissions (which isn't the default) could make use of 3 deprecated host-callback APIs: kubernetes/ingresses, kubernetes/namespaces, kubernetes/services. The attacker can craft a policy that exercises these deprecated API calls and would allow them read access to Ingresses, Namespaces, and Services resources respectively. \nThis attack is read-only, there is no write capability and no access to Secrets, ConfigMaps, or other resource types beyond these three."}, {"lang": "es", "value": "Kubewarden es un motor de pol\u00edticas para Kubernetes. Los operadores de cl\u00faster de Kubewarden pueden otorgar permisos a los usuarios para desplegar AdmissionPolicies y AdmissionPolicyGroups con \u00e1mbito de nombre de espacio en sus Namespaces. Una de las promesas de Kubewarden es que los usuarios configurados pueden desplegar pol\u00edticas con \u00e1mbito de nombre de espacio de manera segura, sin escalada de privilegios. Un atacante con permisos privilegiados de creaci\u00f3n de 'AdmissionPolicy' (lo cual no es el valor predeterminado) podr\u00eda hacer uso de 3 API de devoluci\u00f3n de llamada de host obsoletas: kubernetes/ingresses, kubernetes/namespaces, kubernetes/services. El atacante puede elaborar una pol\u00edtica que utilice estas llamadas a la API obsoletas y les permitir\u00eda acceso de lectura a los recursos Ingresses, Namespaces y Services respectivamente.\nEste ataque es de solo lectura, no hay capacidad de escritura y no hay acceso a Secrets, ConfigMaps u otros tipos de recursos m\u00e1s all\u00e1 de estos tres."}], "id": "CVE-2026-29773", "lastModified": "2026-06-17T10:29:51.563", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-29773", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-10T14:31:41.500373Z", "version": "2.0.3"}}]}, "published": "2026-03-10T17:39:03.210", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/kubewarden/kubewarden-controller/commit/4e41b60ae44902d82d94101bac93fb77cae65651"}, {"source": "security-advisories@github.com", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/kubewarden/kubewarden-controller/pull/1519"}, {"source": "security-advisories@github.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://github.com/kubewarden/kubewarden-controller/security/advisories/GHSA-6r7f-3fwq-hq74"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.33.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "kubewarden-controller", "source": "cna", "vendor": "kubewarden"}, "product": "kubewarden-controller", "vendor": "kubewarden"}], "analysis": {"en": {"generated_at": "2026-04-16T10:03:52.262586+00:00", "value": {"mitigation_remediation": ["Restrict AdmissionPolicy create permissions to only trusted cluster operators", "Disable the deprecated host\u2011callback bindings in the Kubewarden configuration if possible", "Upgrade to a Kubewarden version where these deprecated APIs are removed or access is restricted", "Monitor cluster for the installation of new admission policies that call host\u2011callbacks"], "summary": {"action": "Assess Impact", "impact": "Cross\u2011namespace data exfiltration \u2013 compromised confidentiality"}, "threat_synthesis": {"affected_systems": "The affected vendor and product is Kubewarden \u2013 kubewarden-controller. No specific version range is provided in the data, so all releases of the controller that deploy the deprecated host\u2011callback APIs are considered at risk.", "description_and_impact": "Kubewarden supports cluster operators to let users install namespaced admission policies with controlled permissions. The vulnerability allows an attacker who has been granted the privileged \"AdmissionPolicy\" create permission to craft a policy that invokes three deprecated host\u2011callback APIs \u2013 kubernetes/ingresses, kubernetes/namespaces, and kubernetes/services. By executing those callbacks the attacker obtains read access to the Ingress, Namespace, and Service objects in any namespace in the cluster. The flaw does not provide write capabilities nor access to Secrets or ConfigMaps, so the impact is limited to confidentiality compromise for the specified resource types.", "risk_and_exploitability": "The CVSS score of 4.3 indicates a low severity overall, and the EPSS score of less than 1% suggests a very low exploitation probability. The vulnerability is not listed in CISA\u2019s KEV catalog. The likely attack vector is an attacker who already holds sufficient AdmissionPolicy create permission within the cluster; such a privilege is typically granted to cluster operators or trusted users. If the attacker can deploy or modify admission policies, they can subsequently craft a policy that triggers the host callbacks to exfiltrate the restricted data types. Because the vulnerability is read\u2011only, a successful exploitation would grant exposure of namespace and ingress configurations to the attacker."}}}}, "created": "2026-03-10T14:06:36.773188+00:00", "updated": "2026-04-16T10:15:26.104625+00:00", "vendors": ["kubewarden", "kubewarden$PRODUCT$kubewarden-controller"]}