CVE-2026-122312

A flaw was found in Kyverno. An authenticated user with permissions to create namespaced policies can bypass namespace isolation restrictions by supplying a specially crafted API call URL path containing query strings. Because the path validation mechanism improperly handles query characters,...