---
id: CVE-2025-15613
title: >-
  Kyverno before v1.13.4 is vulnerable to server-side request forgery (SSRF) via
  its Service Call functionality
summary: >-
  Kyverno before v1.13.4 is vulnerable to server-side request forgery (SSRF) via
  its Service Call functionality. An attacker with permission to create Kyverno
  (Cluster)Policies can specify an external URL in a policy's apiCall/service
  conf…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-918
vendor: kyverno
product: github.com/kyverno/kyverno
affected:
  - github.com/kyverno/kyverno <= 1.13.4
published: '2026-09-01'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T15:43:03.760'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-15613'
references:
  - url: 'https://github.com/kyverno/kyverno/security/advisories/GHSA-459x-q9hg-4gpq'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/kyverno-before-1.13.4-ssrf-via-service-call
    label: disclosure@vulncheck.com
  - url: 'https://github.com/kyverno/kyverno'
  - url: 'https://pkg.go.dev/vuln/GO-2025-3615'
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15613.json
  - url: 'https://access.redhat.com/security/cve/CVE-2025-15613'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2025-15613'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-15613'
tags:
  - nvd
  - osv
  - go
  - csaf
  - vex
  - red-hat
epss: 0.00266
epssPercentile: 0.16471
aliases:
  - GHSA-459x-q9hg-4gpq
  - GO-2025-3615
  - BIT-kyverno-2025-15613
ecosystem: go
ingestedAt: '2026-09-02T19:31:26.444Z'
---

## Overview

Kyverno before v1.13.4 is vulnerable to server-side request forgery (SSRF) via its Service Call functionality. An attacker with permission to create Kyverno (Cluster)Policies can specify an external URL in a policy's apiCall/service configuration; although Service Call is documented for in-cluster services, it also resolves external addresses, allowing requests to an attacker-controlled server. Because policy context data (including contents of Kubernetes resources such as secrets) is sent in these requests, an attacker can exfiltrate sensitive cluster data.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2025-15613)

Affected packages:

- `github.com/kyverno/kyverno <= 1.13.4`

Source: https://osv.dev/vulnerability/GHSA-459x-q9hg-4gpq

## Vendor advisories

- **Red Hat VEX** · updated 2026-09-25 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15613.json)