CVE-2025-29778

Summary

CVE-2025-29778 is a vulnerability affecting Kyverno, a policy engine for cloud native platform engineering teams. Before version 1.14.0-alpha.1, Kyverno disregarded the subjectRegExp and IssuerRegExp while verifying artifact signatures in keyless mode. This oversight enables attackers to deploy unauthorized Kubernetes resources that have been signed by unexpected certificates. The deployment of such resources could potentially result in a complete compromise of the Kubernetes cluster. Version 1.14.0-alpha.1 incorporates a patch to rectify this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.