Path Traversal Vulnerability in Kyverno by Nirmata

CVE-2026-122311

What is CVE-2026-122311?

Kyverno versions prior to 1.19.2 contain a vulnerability that fails to properly validate path segments within the resource argument for the methods resource.get() and resource.post(). This oversight allows namespaced CEL policies to escape their intended namespace, enabling tenants with the ability to create a NamespacedValidatingPolicy to exploit this flaw. By inserting '..' segments, these users can read and write arbitrary cluster objects via the admission controller's ServiceAccount, posing a serious risk of unauthorized access and potential cluster takeover.

References