CVE-2026-122316

Kyverno versions 1.17.0 before 1.19.2 are affected by a missing authorization vulnerability in the mutate-existing background processor. This flaw allows namespaced tenants to modify resources outside their own namespace. By creating a NamespacedMutatingPolicy that targets Namespace objects or re...