4 matches found
CVE-2026-122305
Kyverno before 1.19.2 contains a denial of service vulnerability in substituteVariablesIfAny that allows low-privileged users to hang the admission webhook via self-referential variable templates. Attackers can create resources whose annotations re-introduce the embedded policy variable, causing...
EUVD-2026-117216
Kyverno before 1.19.2 contains a denial of service vulnerability in substituteVariablesIfAny that allows low-privileged users to hang the admission webhook via self-referential variable templates. Attackers can create resources whose annotations re-introduce the embedded policy variable, causing...
CVE-2026-122305
Kyverno versions prior to 1.19.2 are vulnerable to a Denial of Service (DoS) flaw within the substituteVariablesIfAny function. The root cause is an unbounded substitution loop triggered by self-referential variable templates. A low-privileged attacker can exploit this by creating resources with ...
PT-2026-137327
Kyverno before 1.19.2 contains a denial of service vulnerability in substituteVariablesIfAny that allows low-privileged users to hang the admission webhook via self-referential variable templates. Attackers can create resources whose annotations re-introduce the embedded policy variable, causing...