CVE-2026-122310

Kyverno versions 1.19.1 before 1.19.2 are vulnerable to Privilege Escalation via the context.apiCall urlPath in a Policy's context. The root cause is an Interpretation Conflict (CWE-436) where Kyverno validates a cleaned path but subsequently executes the raw path. A namespace-scoped user capable...