CVE-2026-122308

Kyverno versions prior to 1.19.2 are vulnerable to an authorization bypass in the Generation Handler due to label spoofing. Users with create/update permissions can bypass security by using crafted generate.kyverno.io labels on a ConfigMap. This allows attackers to trigger synchronized generate p...