EUVD-2026-117219

Kyverno before 1.19.2 contains an authorization bypass vulnerability in the Generation Handler that allows users with create/update permissions to trigger synchronized generate policies by spoofing internal generate.kyverno.io labels. Attackers can label a ConfigMap as managed-by kyverno with...

CVE-2026-122308

Kyverno versions prior to 1.19.2 are vulnerable to an authorization bypass in the Generation Handler due to label spoofing. Users with create/update permissions can bypass security by using crafted generate.kyverno.io labels on a ConfigMap. This allows attackers to trigger synchronized generate p...