CVE-2026-87857

Temporal Server does not bind a workflow-history pagination token to the namespace and workflow named in the request that presents it. GetWorkflowExecutionHistory and GetWorkflowExecutionHistoryReverse authorize the caller against the namespace in the request, then select history from the branch...

EUVD-2026-119560

Kyverno from 1.19.1 before 1.19.2 contains an authorization bypass vulnerability in the apiCall namespace clamp that allows namespace tenants to issue cross-namespace and cluster-scoped API requests by appending malformed percent-escapes to urlPath. Attackers can create namespaced Policies whose...

PT-2026-139956

Name of the Vulnerable Software and Affected Versions Kyverno version 1.19.1 Description An authorization bypass exists in the apiCall namespace clamp. This issue allows namespace tenants to issue cross-namespace and cluster-scoped API requests by appending malformed percent-escapes to the urlPat...

CVE-2026-124440: kyverno: Kyverno from 1.19.1 before 1.19.2 contains an authorization bypass vulnerability in the apiCall namespace clamp that…

Kyverno from 1.19.1 before 1.19.2 contains an authorization bypass vulnerability in the apiCall namespace clamp that allows namespace tenants to issue cross-namespace and cluster-scoped API requests by appending malformed percent-escapes to urlPath. Attackers can create namespaced Policies whose...

CVE-2026-119573

A flaw was found in Traefik. An authorization bypass vulnerability exists in the Kubernetes Ingress NGINX provider when cached client authentication Transport Layer Security TLS configurations are reused. An authenticated user with permissions to create Ingress resources can bypass cross-namespac...

CVE-2026-100703

A flaw was found in Kyverno. This vulnerability allows an authenticated user with permissions to create namespaced policies to access unauthorized cross-namespace data, resulting in information disclosure. Kyverno fails to restrict its global context policy evaluation library to the creator's...

CVE-2026-122316

Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-existing background processor that allows namespaced tenants to modify resources outside their namespace. Attackers can create a NamespacedMutatingPolicy targeting Namespace objects or victim-namespace...

CVE-2026-122320 Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone

Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read resources in other namespaces by templating generate.clone or cloneList namespace values. Attackers can annotate a triggering ConfigMap so the background-controller copies a victim...

CVE-2026-122320 Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone

Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read resources in other namespaces by templating generate.clone or cloneList namespace values. Attackers can annotate a triggering ConfigMap so the background-controller copies a victim...

CVE-2026-122320 Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone

Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read resources in other namespaces by templating generate.clone or cloneList namespace values. Attackers can annotate a triggering ConfigMap so the background-controller copies a victim...

CVE-2026-122320

Kyverno versions before 1.19.2 are vulnerable to a missing authorization vulnerability (CWE-862) allowing namespaced Policy authors to perform cross-namespace resource reads. By templating generate.clone or cloneList namespace values, an attacker can annotate a triggering ConfigMap. This causes t...

CVE-2026-122316 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExisting

Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-existing background processor that allows namespaced tenants to modify resources outside their namespace. Attackers can create a NamespacedMutatingPolicy targeting Namespace objects or victim-namespace...

EUVD-2026-117227

Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-existing background processor that allows namespaced tenants to modify resources outside their namespace. Attackers can create a NamespacedMutatingPolicy targeting Namespace objects or victim-namespace...

CVE-2026-122316 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExisting

Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-existing background processor that allows namespaced tenants to modify resources outside their namespace. Attackers can create a NamespacedMutatingPolicy targeting Namespace objects or victim-namespace...

CVE-2026-122316

Kyverno versions 1.17.0 before 1.19.2 are affected by a missing authorization vulnerability in the mutate-existing background processor. This flaw allows namespaced tenants to modify resources outside their own namespace. By creating a NamespacedMutatingPolicy that targets Namespace objects or re...

CVE-2026-122313 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy

Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to modify resources in other namespaces through NamespacedMutatingPolicy targetMatchConstraints.expression CEL output lacking namespace checks. Attackers can emit a literal target...

CVE-2026-122313 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy

Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to modify resources in other namespaces through NamespacedMutatingPolicy targetMatchConstraints.expression CEL output lacking namespace checks. Attackers can emit a literal target...

PT-2026-137338

Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-existing background processor that allows namespaced tenants to modify resources outside their namespace. Attackers can create a NamespacedMutatingPolicy targeting Namespace objects or victim-namespace...

CVE-2026-88985: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the API server trusts structural SQL identifier fields decoded from the base64-encoded JSON pagetoken parameter before constructing list queries. An attacker who can invoke an...

Kyverno authorization issue vulnerability

Versions 1.17.0 through 1.19.2 of Kyverno contain an authorization issue vulnerability. This vulnerability arises from authorization bypass via NamespacedMutatingPolicy’s mutate-existing targetMatchConstraints.expression, enabling namespace tenants to override resources within other namespaces...