CVE-2026-122313

Kyverno versions 1.17.0 before 1.19.2 is vulnerable to a cross-namespace privilege escalation due to an oversight in the NamespacedMutatingPolicy component. The targetMatchConstraints.expression CEL output fails to perform adequate namespace checks. This allows namespace-scoped tenants to emit li...