CVE-2026-122305

A flaw was found in Kyverno. An authenticated user with low privileges can trigger a Denial of Service DoS by submitting resources containing self-referential variable templates within annotations. When processing these annotations, Kyverno enters an unbounded substitution loop that exhausts syst...

CVE-2026-122305

Kyverno before 1.19.2 contains a denial of service vulnerability in substituteVariablesIfAny that allows low-privileged users to hang the admission webhook via self-referential variable templates. Attackers can create resources whose annotations re-introduce the embedded policy variable, causing...

EUVD-2026-117216

Kyverno before 1.19.2 contains a denial of service vulnerability in substituteVariablesIfAny that allows low-privileged users to hang the admission webhook via self-referential variable templates. Attackers can create resources whose annotations re-introduce the embedded policy variable, causing...

PT-2026-137327

Kyverno before 1.19.2 contains a denial of service vulnerability in substituteVariablesIfAny that allows low-privileged users to hang the admission webhook via self-referential variable templates. Attackers can create resources whose annotations re-introduce the embedded policy variable, causing...