Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after cleaning it but executes the raw path, whose fragment or query the Kubernetes client discards. A namespace-scoped user who can create a Policy can hide ../ segments behind # or ? to reach cluster-scoped endpoints with Kyverno's ServiceAccount, gaining cluster admin.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-122310 · CRITICAL · CVSS 9.9 Kyverno 1.19.1 before 1.19.2 has a privilege escalation vulnerability via Policy apiCall urlPath, allowing a namespace-scoped user to reach cluster-scoped endpoints. CVSS 3.1 · VulnCheck https://cve.new/CVE-2026-122310
CVE-2026-122310 (CRITICAL / 9.9) — #Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after cleaning it but executes the raw pa... https://nvd.nist.gov/vuln/detail/CVE-2026-122310 #docker #cve #kkaasolutions
Kyvernoの脆弱性CVE-2026-122310（CVSS 9.9）：Policyを作れる利用者がクラスター管理者の権限を得られるおそれ、1.19.2で修正、自分は対象？ Kubernetesのポリシー管理ツール「Kyverno」の開発元（kyverno/kyverno）は、Policyのcontext․apiCallのurlPathに関する権限… https://smartscope.blog/blog/kyverno-cve-2026-122310-vulnerability-cvss-9-9-2026/?s=x