CVE-2023-34091

CVE-2023-34091 is a medium-severity vulnerability affecting Kyverno policy engine versions prior to 1.10.0. It allows authenticated attackers to bypass validation, generation, or mutate-existing policies by manipulating the deletionTimestamp field of resources, specifically by leveraging Kubernetes finalizers to prevent deletion. The vulnerability has a CVSS score of 6.5, indicating a network-based attack with low complexity, requiring low privileges, and resulting in high integrity impact without affecting confidentiality or availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.