CVE-2026-122320

Name of the Vulnerable Software and Affected Versions Kyverno versions prior to 1.19.2

Description An authorization flaw allows namespaced Policy authors to access resources in other namespaces. This occurs when templating generate.clone or cloneList namespace values. An attacker can annotate a triggering ConfigMap, causing the background-controller to copy a sensitive ConfigMap from a victim namespace into the attacker's namespace, resulting in cross-tenant data disclosure.

Recommendations Update to version 1.19.2 or later.