critical advisory November 5, 2026

Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302)

Kyverno versions before 1.19.2 are vulnerable to a privilege escalation where namespace admins can bypass RBAC by crafting Policy resources that trigger the controller to perform unauthorized cluster-wide operations.

CVE search metadata

CVE search record: CVE-2026-122302. Severity: critical. CVSS: 9.8. KEV: no. Product: Kyverno (< 1.19.2), Kyverno (1.17.0 - 1.19.1), Kyverno (1.17.0 <= v < 1.19.2), Kyverno (1.16.0 - 1.19.1), Kyverno (>= 1.17.0, < 1.19.2), Kyverno (1.19.1), Kyverno (1.11.0 <= version < 1.19.2). Brief: Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302). Brief link: https://feed.craftedsignal.io/briefs/2026-11-kyverno-privesc/

CVE search record: CVE-2026-122303. Severity: critical. CVSS: 9.9. KEV: no. Product: Kyverno (< 1.19.2), Kyverno (1.17.0 - 1.19.1), Kyverno (1.17.0 <= v < 1.19.2), Kyverno (1.16.0 - 1.19.1), Kyverno (>= 1.17.0, < 1.19.2), Kyverno (1.19.1), Kyverno (1.11.0 <= version < 1.19.2). Brief: Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302). Brief link: https://feed.craftedsignal.io/briefs/2026-11-kyverno-privesc/

CVE search record: CVE-2026-122304. Severity: critical. CVSS: 9.9. KEV: no. Product: Kyverno (< 1.19.2), Kyverno (1.17.0 - 1.19.1), Kyverno (1.17.0 <= v < 1.19.2), Kyverno (1.16.0 - 1.19.1), Kyverno (>= 1.17.0, < 1.19.2), Kyverno (1.19.1), Kyverno (1.11.0 <= version < 1.19.2). Brief: Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302). Brief link: https://feed.craftedsignal.io/briefs/2026-11-kyverno-privesc/

CVE search record: CVE-2026-122311. Severity: critical. CVSS: 9.9. KEV: no. Product: Kyverno (< 1.19.2), Kyverno (1.17.0 - 1.19.1), Kyverno (1.17.0 <= v < 1.19.2), Kyverno (1.16.0 - 1.19.1), Kyverno (>= 1.17.0, < 1.19.2), Kyverno (1.19.1), Kyverno (1.11.0 <= version < 1.19.2). Brief: Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302). Brief link: https://feed.craftedsignal.io/briefs/2026-11-kyverno-privesc/

CVE search record: CVE-2026-122313. Severity: critical. CVSS: 9.9. KEV: no. Product: Kyverno (< 1.19.2), Kyverno (1.17.0 - 1.19.1), Kyverno (1.17.0 <= v < 1.19.2), Kyverno (1.16.0 - 1.19.1), Kyverno (>= 1.17.0, < 1.19.2), Kyverno (1.19.1), Kyverno (1.11.0 <= version < 1.19.2). Brief: Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302). Brief link: https://feed.craftedsignal.io/briefs/2026-11-kyverno-privesc/

CVE search record: CVE-2026-122306. Severity: high. CVSS: 7.7. KEV: no. Product: Kyverno (< 1.19.2), Kyverno (1.17.0 - 1.19.1), Kyverno (1.17.0 <= v < 1.19.2), Kyverno (1.16.0 - 1.19.1), Kyverno (>= 1.17.0, < 1.19.2), Kyverno (1.19.1), Kyverno (1.11.0 <= version < 1.19.2). Brief: Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302). Brief link: https://feed.craftedsignal.io/briefs/2026-11-kyverno-privesc/

CVE search record: CVE-2026-122307. Severity: high. CVSS: 7.7. KEV: no. Product: Kyverno (< 1.19.2), Kyverno (1.17.0 - 1.19.1), Kyverno (1.17.0 <= v < 1.19.2), Kyverno (1.16.0 - 1.19.1), Kyverno (>= 1.17.0, < 1.19.2), Kyverno (1.19.1), Kyverno (1.11.0 <= version < 1.19.2). Brief: Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302). Brief link: https://feed.craftedsignal.io/briefs/2026-11-kyverno-privesc/

CVE search record: CVE-2026-122312. Severity: high. CVSS: 7.7. KEV: no. Product: Kyverno (< 1.19.2), Kyverno (1.17.0 - 1.19.1), Kyverno (1.17.0 <= v < 1.19.2), Kyverno (1.16.0 - 1.19.1), Kyverno (>= 1.17.0, < 1.19.2), Kyverno (1.19.1), Kyverno (1.11.0 <= version < 1.19.2). Brief: Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302). Brief link: https://feed.craftedsignal.io/briefs/2026-11-kyverno-privesc/

CVE search record: CVE-2026-122315. Severity: high. CVSS: 7.5. KEV: no. Product: Kyverno (< 1.19.2), Kyverno (1.17.0 - 1.19.1), Kyverno (1.17.0 <= v < 1.19.2), Kyverno (1.16.0 - 1.19.1), Kyverno (>= 1.17.0, < 1.19.2), Kyverno (1.19.1), Kyverno (1.11.0 <= version < 1.19.2). Brief: Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302). Brief link: https://feed.craftedsignal.io/briefs/2026-11-kyverno-privesc/

CVE search record: CVE-2026-122316. Severity: high. CVSS: 8.5. KEV: no. Product: Kyverno (< 1.19.2), Kyverno (1.17.0 - 1.19.1), Kyverno (1.17.0 <= v < 1.19.2), Kyverno (1.16.0 - 1.19.1), Kyverno (>= 1.17.0, < 1.19.2), Kyverno (1.19.1), Kyverno (1.11.0 <= version < 1.19.2). Brief: Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302). Brief link: https://feed.craftedsignal.io/briefs/2026-11-kyverno-privesc/

CVE search record: CVE-2026-122323. Severity: high. CVSS: 7.5. KEV: no. Product: Kyverno (< 1.19.2), Kyverno (1.17.0 - 1.19.1), Kyverno (1.17.0 <= v < 1.19.2), Kyverno (1.16.0 - 1.19.1), Kyverno (>= 1.17.0, < 1.19.2), Kyverno (1.19.1), Kyverno (1.11.0 <= version < 1.19.2). Brief: Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302). Brief link: https://feed.craftedsignal.io/briefs/2026-11-kyverno-privesc/

CVE search record: CVE-2026-122308. KEV: no. Product: Kyverno (< 1.19.2), Kyverno (1.17.0 - 1.19.1), Kyverno (1.17.0 <= v < 1.19.2), Kyverno (1.16.0 - 1.19.1), Kyverno (>= 1.17.0, < 1.19.2), Kyverno (1.19.1), Kyverno (1.11.0 <= version < 1.19.2). Brief: Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302). Brief link: https://feed.craftedsignal.io/briefs/2026-11-kyverno-privesc/

CVE search record: CVE-2026-122319. KEV: no. Product: Kyverno (< 1.19.2), Kyverno (1.17.0 - 1.19.1), Kyverno (1.17.0 <= v < 1.19.2), Kyverno (1.16.0 - 1.19.1), Kyverno (>= 1.17.0, < 1.19.2), Kyverno (1.19.1), Kyverno (1.11.0 <= version < 1.19.2). Brief: Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302). Brief link: https://feed.craftedsignal.io/briefs/2026-11-kyverno-privesc/

CVE search record: CVE-2026-122320. KEV: no. Product: Kyverno (< 1.19.2), Kyverno (1.17.0 - 1.19.1), Kyverno (1.17.0 <= v < 1.19.2), Kyverno (1.16.0 - 1.19.1), Kyverno (>= 1.17.0, < 1.19.2), Kyverno (1.19.1), Kyverno (1.11.0 <= version < 1.19.2). Brief: Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302). Brief link: https://feed.craftedsignal.io/briefs/2026-11-kyverno-privesc/

Triage facts

Revision 1

Applicability: Kyverno (< 1.19.2), Kyverno (1.17.0 - 1.19.1) +5
Evidence: Unknown
Severity: Critical
Action: Immediate escalation
Sources: 14 public sources
Freshness: Revision 1Nov 5, 04:26 UTC
Vulnerabilities: 14 CVEs
Source quality: A1Likely

What's new

1. added coverage for Kyverno (1.11.0 <= version < 1.19.2) Nov 5, 04:28 via nvd
2. added coverage for Kyverno (1.17.0 - 1.19.1) Nov 5, 04:27 via nvd
3. added coverage for Kyverno (< 1.19.2) Nov 5, 04:27 via nvd
4. added coverage for Kyverno (1.19.1) Nov 5, 04:27 via nvd
5. added coverage for Kyverno (< 1.19.2) Nov 5, 04:27 via nvd

Kyverno versions prior to 1.19.2 contain a vulnerability where generate-rule admission checks incorrectly validate permissions against the controller's identity instead of the author's identity. A namespace administrator can create a malicious Policy resource containing generate rules that target other namespaces or cluster-scoped resources. The background controller, operating with higher privileges, executes these rules, effectively allowing the namespace admin to escalate privileges and create or clone resources across the cluster.

Impact

Successful exploitation allows a user with restricted namespace-level permissions to perform operations outside their authorized scope, including modifying cluster-scoped resources or resources in other namespaces.

Recommendation

Upgrade Kyverno to version 1.19.2 or later immediately.
Audit existing Kyverno ClusterPolicy and Policy resources for unexpected generate rules, particularly those targeting namespaces other than the one where the policy resides or cluster-scoped kinds.
Implement Admission Control policies to restrict the ability of namespace-scoped users to create or modify Kyverno Policy objects if not explicitly required by business workflows.

Immediate actions

Upgrade Kyverno to 1.19.2 or later across all clusters.

IT Operations 24h

Upgrade Kyverno to version 1.19.2 or later

IT Operations 24h

Patch Kyverno to version 1.19.2 or later

IT Operations 24h

Upgrade Kyverno to 1.19.2 or later

IT Operations 24h

Upgrade Kyverno to version 1.19.2

IT Operations 48h

Upgrade Kyverno to version 1.19.2 or later.

IT Operations 48h

Threat Hunt

Identify Policy or ClusterPolicy objects created or modified by non-cluster-admin users that utilize generate rules.

T1068 high high confidence hunt now

Data: Kubernetes API server audit logs

Identify Kyverno policies utilizing mutate-existing with targetMatchConstraints

T1068 high high confidence hunt now

Data: kubectl get cpol -o yaml, kubectl get pol -A -o yaml

Identify namespaces with CleanupPolicy resources containing apiCall or globalReference fields

T1068 high high confidence hunt now

Data: Kubernetes API server audit logs, Kubernetes resource manifest dump

Identify creation or modification of NamespacedValidatingPolicy resources containing ".." path segments

T1068 high high confidence hunt now

Data: Kubernetes audit logs

Monitor Kubernetes audit logs for high-frequency or anomalous updates to Kyverno Policy or ClusterPolicy objects by non-admin service accounts.

T1499.001 medium medium confidence hunt now

Data: Kubernetes API server audit logs

Identify creation of PolicyExceptions resources containing negated matchConditions

T1068 high medium confidence hunt now

Data: Kubernetes API Audit logs

Identify Kyverno policies containing APICall definitions with query parameters

T1068 high high confidence hunt now

Data: Kubernetes API / Kyverno policy CRD definitions

Monitor Kubernetes logs for repetitive crash-loop events involving the kyverno-reports-controller pod.

T1499 medium medium confidence hunt now

Data: Kubernetes container logs / events

Identify NamespacedMutatingPolicy objects utilizing CEL expressions to target resources outside the local namespace.

T1068 high high confidence hunt now

Data: Kubernetes audit logs

Identify repeated OOMKilled events for Kyverno pods

T1498 medium medium confidence monitor or close

Data: Kubernetes pod lifecycle events (kubectl get events -n kyverno), Pod status showing OOMKilled

Mitigations

Upgrade to Kyverno 1.19.2+.

immediate IT Operations

CVE-2026-122302

Upgrade to Kyverno 1.19.2

immediate IT Operations

CVE-2026-122303

Upgrade to version 1.19.2

immediate IT Operations

CVE-2026-122312

Upgrade Kyverno to 1.19.2 or later.

immediate IT Operations

CVE-2026-122315

Upgrade to Kyverno 1.19.2.

immediate IT Operations

CVE-2026-122316

Upgrade Kyverno to version 1.19.2 or later

immediate IT Operations

CVE-2026-122323

Affected

Vendors

Kyverno

Products

Kyverno < 1.19.2

Kyverno 1.17.0 - 1.19.1

Kyverno 1.17.0 <= v < 1.19.2

Kyverno 1.16.0 - 1.19.1

Kyverno >= 1.17.0, < 1.19.2

Kyverno 1.19.1

Kyverno 1.11.0 <= version < 1.19.2

CVEs

9.8

9.9

9.9

9.9

9.9

7.7

7.7

7.7

7.5

8.5

7.5

CPE identifiers

kyverno:kyverno kyverno:kyverno:1.17.0 kyverno:kyverno:1.19.1

References

MITRE ATT&CK

T1068 · TA0004

Exploitation for Privilege Escalation

Privilege Escalation

high

Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins to create resources beyond their RBAC because generate-rule admission checks verify the controller's permissions, not the author's.

T1499.001 · TA0040

OS Exhaustion Flood

Impact

high

Attackers can create a Policy with crafted match and exclude names evaluated by ValidateMatchExcludeConflict, pinning cores and causing cluster-wide webhook timeouts that block resource operations.

T1499 · TA0040

Endpoint Denial of Service

Impact

high

Attackers can push an OCI referrer manifest with a non-string type field to bypass image verification under failurePolicy Ignore or crash-loop the reports-controller.

T1498 · TA0040

Network Denial of Service

Impact

high

Attackers who control registry referrers or signatures can publish small gzip layers that decompress beyond maxPayloadSize, causing admission controller OOM kills and denial of service.