Kyverno: Signature verification bypass via image tag cache poisoning (CVE-2026-122321)
Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string rather than the verified digest.
CVE search metadata
CVE search record: CVE-2026-122321. Severity: critical. CVSS: 9.1. KEV: no. Product: Kyverno 1.18.0 before 1.19.2 (< 1.19.2). Brief: Kyverno: Signature verification bypass via image tag cache poisoning (CVE-2026-122321). Brief link: https://feed.craftedsignal.io/briefs/2026-11-kyverno-signature-bypass/
Triage facts
Revision 1- Applicability
- Kyverno 1.18.0 before 1.19.2 (< 1.19.2)
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 1 public source
- Freshness
- Revision 1Nov 5, 04:27 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Kyverno 1.18.0 before 1.19.2 is vulnerable to a signature verification bypass in verifyImages. Cached verification results are keyed by the image reference string (such as a tag) instead of the verified digest, causing cache hits to skip signature and attestation checks. An attacker who can submit workloads and move a registry tag can warm the cache with a signed image, repoint the tag, and have Kyverno admit the workload and use mutateDigest to pin the unverified digest.