CVE-2026-124440

Kyverno versions 1.19.1 before 1.19.2 are vulnerable to an authorization bypass within the apiCall namespace clamp. The root cause is the handling of malformed percent-escapes in the urlPath, which allows namespace tenants to issue cross-namespace and cluster-scoped API requests. An attacker can ...