EUVD-2026-117218

Kyverno before 1.19.2 contains a policy bypass vulnerability in the admissionpolicygenerator controller, which folds PolicyExceptions into generated ValidatingAdmissionPolicies while ignoring the --enablePolicyException, --exceptionNamespace, and policy kind gates. Users with namespaced create...

CVE-2026-122307

Kyverno versions prior to 1.19.2 are vulnerable to a policy bypass in the admissionpolicygenerator controller. The root cause is that the controller folds PolicyExceptions into generated ValidatingAdmissionPolicies while failing to respect specific gates such as --enablePolicyException, --excepti...

PT-2026-137329

Kyverno before 1.19.2 contains a policy bypass vulnerability in the admissionpolicygenerator controller, which folds PolicyExceptions into generated ValidatingAdmissionPolicies while ignoring the --enablePolicyException, --exceptionNamespace, and policy kind gates. Users with namespaced create...