cyfenced.com →

[ CVE-2026-122311 · Published 5 Nov 2026 ]

Vulnerability in kyverno

CVSS 9.9 No fix listed yet

[ Why it matters ]Priority signals

  • Critical severity: CVSS 9.9

[ Description ]Official description

Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument of resource.get() and resource.post(), allowing namespaced CEL policies to escape their namespace. Tenants who can create a NamespacedValidatingPolicy can insert .. segments to read and write arbitrary cluster objects using the admission controller's ServiceAccount, leading to cluster takeover.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References