Description
Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument of resource.get() and resource.post(), allowing namespaced CEL policies to escape their namespace. Tenants who can create a NamespacedValidatingPolicy can insert .. segments to read and write arbitrary cluster objects using the admission controller's ServiceAccount, leading to cluster takeover.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| kyverno | kyverno | 1.16.0 – < 1.19.2 | 1.19.2 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | kyverno-1.17 +1 | No fix yet | — |
Advisories 1
- WID-SEC-2026-4096 Kyverno: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 4, 2026