CVE-2026-23881

Name of the Vulnerable Software and Affected Versions Kyverno versions prior to 1.16.3 Kyverno versions prior to 1.15.3

Description Kyverno is a policy engine for cloud native platform engineering teams. Affected versions experience unbounded memory consumption within the policy engine. Users with policy creation privileges can trigger a denial of service by creating policies that exponentially amplify string data using context variables. This issue is similar to a 'Billion Laughs' style attack, where an attacker can cause the system to crash by exhausting available memory.

Recommendations Update to Kyverno version 1.16.3 or later. Update to Kyverno version 1.15.3 or later.