CVE-2026-124441

Name of the Vulnerable Software and Affected Versions Kyverno versions prior to 1.19.2

Description An authorization bypass allows namespaced tenants to generate any resource kind in any namespace by templating the generate rule's kind and namespace with variables. An attacker can create a Policy and trigger a ConfigMap within their own namespace, which leads the privileged background-controller to write NetworkPolicies or RoleBindings into victim or kube-system namespaces.

Recommendations Update to version 1.19.2 or later.