EUVD-2026-117213

Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins to create resources beyond their RBAC because generate-rule admission checks verify the controller's permissions, not the author's. Attackers can create a namespaced Policy with generate rules targeti...

CVE-2026-122302

Kyverno versions before 1.19.2 are vulnerable to a privilege escalation vulnerability due to insufficient permission checks in the generate-rule admission logic. The system incorrectly verifies the permissions of the background controller rather than the author of the policy. This allows namespac...

PT-2026-137324

Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins to create resources beyond their RBAC because generate-rule admission checks verify the controller's permissions, not the author's. Attackers can create a namespaced Policy with generate rules targeti...