Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:kyverno:kyverno:*:*:*:*:*:*:*:*

3 briefs RSS
high advisory

Kyverno: Authorization bypass via variable injection (CVE-2026-124441)

Kyverno versions before 1.19.2 are vulnerable to an authorization bypass allowing tenants to leverage the privileged background-controller to create or modify arbitrary resources across namespaces.

Kyverno
1t 1c
critical advisory

Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302)

Kyverno versions before 1.19.2 are vulnerable to a privilege escalation where namespace admins can bypass RBAC by crafting Policy resources that trigger the controller to perform unauthorized cluster-wide operations.

PoC Kyverno +6 kubernetes cve privilege-escalation cloud-security denial-of-service supply-chain
4t 14c
critical advisory

CVE-2026-100706: Path Traversal in Kyverno Policy apiCall Processing

Kyverno versions before 1.19.1 contain a path traversal vulnerability in apiCall urlPath processing, enabling namespace-restricted users to perform unauthorized cluster-wide object manipulation via URL-encoded segments.

kyverno +2 path-traversal kubernetes privilege-escalation vulnerability cloud-native
2t 1c