CVE-2026-124441 Kyverno before 1.19.2 Authorization Bypass via Variable Generate Target Kind

Kyverno before 1.19.2 contains an authorization bypass vulnerability that allows namespaced tenants to generate any resource kind in any namespace by templating the generate rule's kind and namespace with variables. Attackers can create a Policy and trigger ConfigMap in their own namespace, causi...

EUVD-2026-119559

Kyverno before 1.19.2 contains an authorization bypass vulnerability that allows namespaced tenants to generate any resource kind in any namespace by templating the generate rule's kind and namespace with variables. Attackers can create a Policy and trigger ConfigMap in their own namespace, causi...

CVE-2026-124441

Kyverno versions before 1.19.2 are vulnerable to an authorization bypass vulnerability. This flaw allows namespaced tenants to generate any resource kind in any namespace by templating the generate rule's kind and namespace with variables. An attacker can create a Policy to trigger a ConfigMap in...

PT-2026-139957

Kyverno before 1.19.2 contains an authorization bypass vulnerability that allows namespaced tenants to generate any resource kind in any namespace by templating the generate rule's kind and namespace with variables. Attackers can create a Policy and trigger ConfigMap in their own namespace, causi...

CVE-2026-124441: kyverno: Kyverno before 1.19.2 contains an authorization bypass vulnerability that allows namespaced tenants to generate any…

Kyverno before 1.19.2 contains an authorization bypass vulnerability that allows namespaced tenants to generate any resource kind in any namespace by templating the generate rule's kind and namespace with variables. Attackers can create a Policy and trigger ConfigMap in their own namespace, causi...

CVE-2026-122302

Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins to create resources beyond their RBAC because generate-rule admission checks verify the controller's permissions, not the author's. Attackers can create a namespaced Policy with generate rules targeti...

CVE-2026-122302 Kyverno before 1.19.2 Privilege Escalation via Generate Rule Permission Check

Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins to create resources beyond their RBAC because generate-rule admission checks verify the controller's permissions, not the author's. Attackers can create a namespaced Policy with generate rules targeti...

CVE-2026-122302 Kyverno before 1.19.2 Privilege Escalation via Generate Rule Permission Check

Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins to create resources beyond their RBAC because generate-rule admission checks verify the controller's permissions, not the author's. Attackers can create a namespaced Policy with generate rules targeti...

CVE-2026-122302

Kyverno versions before 1.19.2 are vulnerable to a privilege escalation vulnerability due to insufficient permission checks in the generate-rule admission logic. The system incorrectly verifies the permissions of the background controller rather than the author of the policy. This allows namespac...

EUVD-2026-117213

Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins to create resources beyond their RBAC because generate-rule admission checks verify the controller's permissions, not the author's. Attackers can create a namespaced Policy with generate rules targeti...

PT-2026-137324

Name of the Vulnerable Software and Affected Versions Kyverno versions prior to 1.19.2 Description Namespace administrators can escalate privileges to create resources exceeding their Role-Based Access Control RBAC permissions. This occurs because the generate-rule admission checks verify the...