Kyverno: 24 advisories fixed in 1.19.2, including namespace-user-to-cluster-admin privilege escalation and image signature verification bypasses

Kyverno, the Kubernetes policy engine, fixed 24 security advisories (9 critical, 14 high, 1 moderate) in v1.19.2, released Oct 20; the CVE ids were published Nov 5. The worst bugs, rated CVSS 9.9 by the maintainers, let a user who can only create a policy in their own namespace escape it: an apiCall urlPath that hides ../ behind a ? or # separator (CVE-2026-122310, an incomplete fix of an earlier bug), CEL resource arguments and CleanupPolicy context loaders that reach other namespaces (CVE-2026-122311, CVE-2026-122304), and NamespacedMutatingPolicy mutateExisting targets that overwrite resources anywhere (CVE-2026-122303, CVE-2026-122313). Requests run as Kyverno's own ServiceAccount, which can create webhook configurations, so the maintainers say this reaches cluster admin. Other fixes cover image verification bypasses (a forged annotation, an attestation-type panic, a signature cache bypass, cosign keyless checks passing with empty SAN certificates), PolicyException and generate-rule bypasses, and several denial-of-service bugs. Multi-tenant clusters where tenants can write namespaced Kyverno policies are most at risk. Upgrade to 1.19.2 (Helm chart 3.9.2). No exploitation reported.

Why this severity: CVSS 9.9 for the worst advisories per the Kyverno maintainers; exploiting them needs permission to create namespaced Kyverno policies; no reported exploitation and not in CISA KEV as of Nov 5

Started

Oct 20, 2026

CVEs

CVE-2026-122302CVE-2026-122303CVE-2026-122304CVE-2026-122305CVE-2026-122306CVE-2026-122307CVE-2026-122308CVE-2026-122309CVE-2026-122310CVE-2026-122311CVE-2026-122312CVE-2026-122313CVE-2026-122314CVE-2026-122315CVE-2026-122316CVE-2026-122318CVE-2026-122319CVE-2026-122320CVE-2026-122321CVE-2026-122322CVE-2026-122323

• #Kyverno
• Kubernetes
• #Privilege escalation