Skip to content
Threat Feed
Subscribe

Product

Kyverno (1.14.0 - 1.19.0)

1 brief RSS
critical advisory

CVE-2026-100706: Path Traversal in Kyverno Policy apiCall Processing

Kyverno versions before 1.19.1 contain a path traversal vulnerability in apiCall urlPath processing, enabling namespace-restricted users to perform unauthorized cluster-wide object manipulation via URL-encoded segments.

kyverno +2 path-traversal kubernetes privilege-escalation vulnerability cloud-native
2t 1c