CVE-2025-46342

Summary

CVE-2025-46342 is a vulnerability affecting the Kyverno policy engine used by cloud native platform engineering teams. Prior to versions 1.13.5 and 1.14.0, a flaw in the function `GetNamespaceSelectorsFromNamespaceLister` within `pkg/utils/engine/labels.go` could result in policy rules with namespace selectors not being appropriately applied during admission review. This oversight could bypass important mutations and validations, granting attackers with K8s API access the opportunity to execute malicious operations. This vulnerability has since been rectified in versions 1.13.5 and 1.14.0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.