CVE-2026-122302

Kyverno versions before 1.19.2 are vulnerable to a privilege escalation vulnerability due to insufficient permission checks in the generate-rule admission logic. The system incorrectly verifies the permissions of the background controller rather than the author of the policy. This allows namespac...