{"id":"CVE-2025-15613","aliases":["GHSA-459x-q9hg-4gpq","GO-2025-3615"],"url":"https://o3.security/vulnerability/CVE-2025-15613","summary":"Kyverno before v1.13.4 SSRF via Service Call","details":"Kyverno before v1.13.4 is vulnerable to server-side request forgery (SSRF) via its Service Call functionality. An attacker with permission to create Kyverno (Cluster)Policies can specify an external URL in a policy's apiCall/service configuration; although Service Call is documented for in-cluster services, it also resolves external addresses, allowing requests to an attacker-controlled server. Because policy context data (including contents of Kubernetes resources such as secrets) is sent in these requests, an attacker can exfiltrate sensitive cluster data.","published":"2026-09-01T11:33:51.949Z","modified":"2026-09-12T03:30:24.197173809Z","cvss":null,"epss":{"score":0.00266,"percentile":0.18532,"asOf":"2026-09-15"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Go","name":"github.com/kyverno/kyverno","fixedVersion":null}],"fix":null,"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15613.json"},{"type":"ADVISORY","url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-459x-q9hg-4gpq"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15613"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/kyverno-before-1.13.4-ssrf-via-service-call"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-09-12T03:30:24.197173809Z"}}