MEDIUM 4.3 NVD
CVE-2026-78427
The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of three hardcoded service mesh sidecar im
The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of three hardcoded service mesh sidecar images. Since the image path is entirely controlled by the workload author, any user capable of deploying workloads can evade admission deny rules simply by naming their image path after one of these sidecar images.
References
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-78427
- https://github.com/neuvector/neuvector/security/advisories/GHSA-78r4-3wfq-r2xm
This medium severity vulnerability with a CVSS score of 4.3 was published on 2026-09-17 via NVD.
vulnfeed aggregates 12865 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.