CVE-2026-122304

Kyverno versions 1.17.0 before 1.19.2 are vulnerable to an authorization bypass in the cleanup controller. The vulnerability occurs because the controller builds its context loader with a nil policy , allowing namespace admins to escape namespace confinement. An attacker can create a namespaced C...