CVE-2026-100704

A flaw was found in Kyverno. When evaluating image validation policies, the policy exception handler fails to restrict exemptions to specific designated images, applying the exception to all images within a matching resource instead. An authenticated user can exploit this vulnerability to bypass...