Admission Webhook Bypass in NeuVector Service Mesh by NeuVector

CVE-2026-78427

What is CVE-2026-78427?

The NeuVector admission webhook is vulnerable due to improper handling of specific container image paths related to service mesh sidecar images. This flaw permits users to deploy workloads with image paths that match these hardcoded values, allowing them to bypass security policies that would ordinarily trigger a denial for non-compliant images. Consequently, this vulnerability can lead to unauthorized container deployments, exposing the system to various security risks.

References