Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:kyverno:kyverno:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

CVE-2026-100706: Path Traversal in Kyverno Policy apiCall Processing

Kyverno versions before 1.19.1 contain a path traversal vulnerability in apiCall urlPath processing, enabling namespace-restricted users to perform unauthorized cluster-wide object manipulation via URL-encoded segments.

kyverno +2 path-traversal kubernetes privilege-escalation vulnerability cloud-native
2t 1c