CVE-2026-122304
Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace admins to escape namespace confinemen
CVSS
9.9
Crítico
EPSS
0.4%
p34
KEV
—
Exploit Today
10
0-100
Publicado: 5 nov 2026 · Última mod.: 5 nov 2026 · CWE-863
Sin historial EPSS suficiente todavía.
Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace admins to escape namespace confinement because the cleanup controller builds its context loader with a nil policy. Attackers can create a namespaced CleanupPolicy with apiCall or globalReference context entries to read cross-namespace Secrets and modify validatingwebhookconfigurations using the cleanup controller's ServiceAccount.
- github.comhttps://github.com/kyverno/kyverno/security/advisories/GHSA-p58h-r4j3-h5vx
- github.comhttps://github.com/kyverno/kyverno/security/advisories/GHSA-rcxg-3f92-3mgr
- www.vulncheck.comhttps://www.vulncheck.com/advisories/kyverno-1.17.0-before-1.19.2-privilege-escalation-via-cleanuppolicy-context-loader
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1233343.8 BAJ—
———In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project5hCVE-2026-1233333.8 BAJ—
———In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints5hCVE-2026-1233286.4 MED—
———In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab5hCVE-2026-1233267.1 ALT—
———In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension5hCVE-2026-1233247.7 ALT—
———In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible5hCVE-2026-1232993.1 BAJ—
———In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possible5h