Skip to content
Threat Feed
Subscribe

Product

Kyverno (>= 1.17.0, < 1.19.2)

1 brief RSS
critical advisory

Kyverno: Privilege escalation via generate-rule admission validation (CVE-2026-122302)

Kyverno versions before 1.19.2 are vulnerable to a privilege escalation where namespace admins can bypass RBAC by crafting Policy resources that trigger the controller to perform unauthorized cluster-wide operations.

Kyverno +6 kubernetes cve privilege-escalation cloud-security denial-of-service supply-chain
4t 14c