EUVD-2026-117224

Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to modify resources in other namespaces through NamespacedMutatingPolicy targetMatchConstraints.expression CEL output lacking namespace checks. Attackers can emit a literal target...

CVE-2026-122313

Kyverno versions 1.17.0 before 1.19.2 is vulnerable to a cross-namespace privilege escalation due to an oversight in the NamespacedMutatingPolicy component. The targetMatchConstraints.expression CEL output fails to perform adequate namespace checks. This allows namespace-scoped tenants to emit li...

CVE-2026-122303

Kyverno versions 1.17.0 before 1.19.2 are vulnerable to an authorization bypass in the NamespacedMutatingPolicy component. Specifically, the mutate-existing targetMatchConstraints.expression allows attackers to provide a CEL map literal to fabricate a target with arbitrary metadata. This enables ...

EUVD-2026-117214

Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace tenants to overwrite resources in other namespaces via NamespacedMutatingPolicy mutate-existing targetMatchConstraints.expression. Attackers can return a CEL map literal fabricating a target wit...

PT-2026-137325

Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace tenants to overwrite resources in other namespaces via NamespacedMutatingPolicy mutate-existing targetMatchConstraints.expression. Attackers can return a CEL map literal fabricating a target wit...

PT-2026-137335

Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to modify resources in other namespaces through NamespacedMutatingPolicy targetMatchConstraints.expression CEL output lacking namespace checks. Attackers can emit a literal target...