A vulnerability was found in Kyverno up to 1.16.3. It has been declared as critical. This issue affects some unknown processing of the component API Call Handler. The manipulation results in insecure storage of sensitive information.

This vulnerability is known as CVE-2026-40868. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.