CVE-2026-122320

Kyverno versions before 1.19.2 are vulnerable to a missing authorization vulnerability (CWE-862) allowing namespaced Policy authors to perform cross-namespace resource reads. By templating generate.clone or cloneList namespace values, an attacker can annotate a triggering ConfigMap. This causes t...

EUVD-2026-117230

Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read resources in other namespaces by templating generate.clone or cloneList namespace values. Attackers can annotate a triggering ConfigMap so the background-controller copies a victim...