CVE-2026-122321

Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string such as a tag rather than bound to the verified digest, so cache hits skip signature and attestation checks. An attacker who can submit...

EUVD-2026-117231

Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string such as a tag rather than bound to the verified digest, so cache hits skip signature and attestation checks. An attacker who can submit...

CVE-2026-122321 Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypass

Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string such as a tag rather than bound to the verified digest, so cache hits skip signature and attestation checks. An attacker who can submit...

CVE-2026-122321

Kyverno versions 1.18.0 before 1.19.2 are vulnerable to a signature verification bypass in the verifyImages component. The root cause is that cached verification results are keyed by the image reference string (e.g., a tag) instead of being bound to the verified digest. This allows an attacker wi...

PT-2026-137342

Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string such as a tag rather than bound to the verified digest, so cache hits skip signature and attestation checks. An attacker who can submit...