Skip to content
OpenAdvisories
High WID-SEC-2026-4096 19 CVEs

Kyverno: Mehrere Schwachstellen

Published Oct 21, 2026 · Updated Nov 4, 2026 · Revision 2 · de-DE

Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Kyverno ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.

Product

Kyverno ist eine Open-Source-Richtlinien-Engine für Kubernetes, die Richtlinien als Code validiert, mutiert und generiert.

Vulnerabilities 19

  • Critical 9.9
    CVE-2026-122303

    Kyverno 1.17.0 before 1.19.2 Cross-Namespace Resource Overwrite via NamespacedMutatingPolicy

    Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace tenants to overwrite resources in other namespaces via NamespacedMutatingPolicy mutate-existing targetMatchConstraints.expression. Attackers can return a CE…

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • Critical 9.9
    CVE-2026-122304

    Kyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context Loader

    Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace admins to escape namespace confinement because the cleanup controller builds its context loader with a nil policy. Attackers can create a namespaced Cleanup…

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • Critical 9.9
    CVE-2026-122310

    Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPath

    Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after cleaning it but executes the raw path, whose fragment or query the Kubernetes client discards. A namespace-scoped user who can create a Policy can hide ../ segments behind # …

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • Critical 9.9
    CVE-2026-122311

    Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argument

    Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument of resource.get() and resource.post(), allowing namespaced CEL policies to escape their namespace. Tenants who can create a NamespacedValidatingPolicy can insert .. seg…

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • Critical 9.9
    CVE-2026-122313

    Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy

    Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to modify resources in other namespaces through NamespacedMutatingPolicy targetMatchConstraints.expression CEL output lacking namespace checks…

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • High 8.5
    CVE-2026-122308

    Kyverno before 1.19.2 Label Spoofing via Generation Handler processRequest

    Kyverno before 1.19.2 contains an authorization bypass vulnerability in the Generation Handler that allows users with create/update permissions to trigger synchronized generate policies by spoofing internal generate.kyverno.io labels. Attackers can label a Co…

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • High 8.5
    CVE-2026-122316

    Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExisting

    Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-existing background processor that allows namespaced tenants to modify resources outside their namespace. Attackers can create a NamespacedMutatingPolicy targeting …

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • High 7.7
    CVE-2026-122305

    Kyverno before 1.19.2 Denial of Service via Nested Variable Substitution Loop

    Kyverno before 1.19.2 contains a denial of service vulnerability in substituteVariablesIfAny that allows low-privileged users to hang the admission webhook via self-referential variable templates. Attackers can create resources whose annotations re-introduce …

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • High 7.7
    CVE-2026-122306

    Kyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard Matching

    Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespaced policy authors to exhaust admission controller CPU by submitting pathological wildcard patterns. Attackers can create a Policy with crafted match and exclude names evaluat…

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • High 7.7
    CVE-2026-122307

    Kyverno before 1.19.2 Policy Bypass via admissionpolicygenerator PolicyException Handling

    Kyverno before 1.19.2 contains a policy bypass vulnerability in the admissionpolicygenerator controller, which folds PolicyExceptions into generated ValidatingAdmissionPolicies while ignoring the --enablePolicyException, --exceptionNamespace, and policy kind …

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • High 7.7
    CVE-2026-122312

    Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query String

    Kyverno from 1.19.1 before 1.19.2 contains a namespace isolation bypass in APICall Fetch() in pkg/engine/apicall/apiCall.go because path.Clean treats '?' as a path character, letting the namespace regex match segments inside the query string. Users who can cr…

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • High 7.7
    CVE-2026-122318

    Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificates

    Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured priva…

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • High 7.7
    CVE-2026-122320

    Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone

    Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read resources in other namespaces by templating generate.clone or cloneList namespace values. Attackers can annotate a triggering ConfigMap so the b…

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • High 7.5
    CVE-2026-122314

    Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panic

    Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who can submit resources to crash the policy engine. Attackers can submit resources with non-string fields referenced by {{- variable }} shallow s…

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • High 7.5
    CVE-2026-122315

    Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panic

    Kyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unauthenticated attackers to crash the policy engine via crafted attestation statements. Attackers can push an OCI referrer manifest with a non-string type field to by…

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • High 7.5
    CVE-2026-122319

    Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic

    Kyverno before 1.19.2 contains a denial-of-service vulnerability in the In and NotIn operators that allows attackers to crash the policy engine via an unchecked type assertion. Attackers can submit resources whose JMESPath-evaluated values yield arrays of int…

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • High 7.5
    CVE-2026-122322

    Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompression

    Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows remote attackers to exhaust memory by supplying highly compressed attestation layers. Attackers controlling registry referrer artifacts can pus…

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • High 7.5
    CVE-2026-122323

    Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression

    Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows attackers to exhaust memory by supplying highly compressed notary signature layers. Attackers who control registry referrers or signatures ca…

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi
  • Medium 6.2
    CVE-2026-122309

    Kyverno before 1.19.2 Denial of Service via Unbounded CEL Policy Evaluation Cost

    Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespace-scoped policy authors to exhaust CPU and memory by submitting CEL expressions evaluated without runtime cost limits. Attackers can create a NamespacedValidatingPolicy or Na…

    kyverno kyverno kyverno-1.17 kyverno-1.18 Wolfi

Revision history

  1. #2

    Referenz(en) aufgenommen: CVE-2026-122319, EUVD-2026-117229, CVE-2026-122303, EUVD-2026-117214, CVE-2026-122312, EUVD-2026-117223, CVE-2026-122313, EUVD-2026-117224, CVE-2026-122314, EUVD-2026-117225, CVE-2026-122316, EUVD-2026-117227, CVE-2026-122320, EUVD-2026-117230, CVE-2026-122311, EUVD-2026-117222, CVE-2026-122304, EUVD-2026-117215, CVE-2026-122305, EUVD-2026-117216, CVE-2026-122308, EUVD-2026-117219, CVE-2026-122309, EUVD-2026-117220, CVE-2026-122310, EUVD-2026-117221, CVE-2026-122315, EUVD-2026-117226, CVE-2026-122318, EUVD-2026-117228, CVE-2026-122306, EUVD-2026-117217, CVE-2026-122307, EUVD-2026-117218, CVE-2026-122323, EUVD-2026-117233, CVE-2026-122322, EUVD-2026-117232

  2. #1

    Initiale Fassung

References