{"id":"CVE-2026-122315","kind":"vulnerability","aliases":["CVE-2026-122315"],"related":[],"title":"Kyverno: unchecked type assertion lets crafted attestations crash policy engine","description":"Kyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unauthenticated attackers to crash the policy engine via crafted attestation statements. Attackers can push an OCI referrer manifest with a non-string type field to bypass image verification under failurePolicy Ignore or crash-loop the reports-controller.","summary":"Kyverno before 1.19.2 has an unchecked type assertion in buildStatementMap that panics on a crafted attestation statement. An unauthenticated attacker can push an OCI referrer manifest with a non-string type field to crash the policy engine or bypass image verification when failurePolicy is Ignore.","severity":"high","cvss":8.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","kubernetes","kyverno","self-hosted"],"not_affected_if":["kyverno-1.19.2-or-later","kyverno-not-installed","no-image-verification-policies"],"how_to_check":"- Check the installed Kyverno version with `kubectl get deploy -n kyverno -o jsonpath='{.items[*].spec.template.spec.containers[*].image}'`\n- Check whether the Kyverno admission policies use image verification with `failurePolicy: Ignore`\n- Check the reports-controller for crash loops with `kubectl get pods -n kyverno`","fix":"- Kyverno: move to `1.19.2` or later (the sources state the fix is in 1.19.2)","status":"open","published_at":"2026-11-05T03:17:24+00:00","first_seen_at":"2026-11-05T03:31:42+00:00","triaged_at":"2026-11-05T03:33:13+00:00","updated_at":"2026-11-05T03:33:13+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-11-05T03:33:13Z","model":"claude-haiku-5-5","output":{"fix":"- Kyverno: move to `1.19.2` or later (the sources state the fix is in 1.19.2)","reach":"network","title":"Kyverno: unchecked type assertion lets crafted attestations crash policy engine","impact":"medium","summary":"Kyverno before 1.19.2 has an unchecked type assertion in buildStatementMap that panics on a crafted attestation statement. An unauthenticated attacker can push an OCI referrer manifest with a non-string type field to crash the policy engine or bypass image verification when failurePolicy is Ignore.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["kubernetes","kyverno","self-hosted"],"confidence":0.7,"fix_status":"available","needs_auth":"no","worst_case":"Policy engine crashes and image verification is bypassed under Ignore policy","analyst_note":"","how_to_check":"- Check the installed Kyverno version with `kubectl get deploy -n kyverno -o jsonpath='{.items[*].spec.template.spec.containers[*].image}'`\n- Check whether the Kyverno admission policies use image verification with `failurePolicy: Ignore`\n- Check the reports-controller for crash loops with `kubectl get pods -n kyverno`","plain_action":"","needs_analyst":false,"not_affected_if":["kyverno-not-installed","no-image-verification-policies","kyverno-1.19.2-or-later"],"who_is_affected":"Kubernetes clusters running Kyverno before 1.19.2 that use image verification with attestations are exposed. An attacker who can push OCI artifacts to a registry the cluster verifies can crash the policy engine or bypass verification when failurePolicy is Ignore. Clusters without Kyverno image verification policies are not affected by the bypass path.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000761,"input_tokens":4284,"output_tokens":666,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-122315':13A,16A '-2026':12A,15A '1.19.2':25B,71C 'allow':80C 'assert':4A,30B,76C 'attack':42B,82C,92C 'attest':7A,38B,90C 'buildstatementmap':32B,78C 'bypass':62B,107C 'contain':72C 'control':120C 'craft':6A,37B,89C 'crash':8A,57B,84C,115C 'crash-loop':114C 'cve':11A,14A 'engin':10A,60B,87C 'failurepolici':66B,111C 'field':55B,105C 'host':22B 'ignor':68B,112C 'imag':63B,108C 'infrastructur':17B 'kubernet':18B 'kyverno':1A,19B,23B,69C 'let':5A 'loop':116C 'manifest':48B,98C 'non':52B,102C 'non-str':51B,101C 'oci':46B,96C 'panic':34B 'polici':9A,59B,86C 'push':44B,94C 'referr':47B,97C 'report':119C 'reports-control':118C 'self':21B 'self-host':20B 'statement':39B,91C 'string':53B,103C 'type':3A,29B,54B,75C,104C 'unauthent':41B,81C 'uncheck':2A,28B,74C 'verif':64B,109C 'via':88C","nicknames":[],"mitigations":[],"who_affected":"Kubernetes clusters running Kyverno before 1.19.2 that use image verification with attestations are exposed. An attacker who can push OCI artifacts to a registry the cluster verifies can crash the policy engine or bypass verification when failurePolicy is Ignore. Clusters without Kyverno image verification policies are not affected by the bypass path.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","kubernetes","kyverno","selfhosted"],"campaign_type":null,"first_public_at":"2026-10-21T15:56:43+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-122315","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-122315","severity":null,"published_at":"2026-11-05T03:17:24+00:00","modified_at":"2026-11-05T03:17:24+00:00","first_seen_at":"2026-11-05T03:31:42+00:00","fetched_at":"2026-11-05T03:31:42+00:00","note":null}],"documents":[{"id":72712,"url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-24cc-9745-hxfc","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-10-21T15:56:43+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"},{"id":72713,"url":"https://www.vulncheck.com/advisories/kyverno-before-1.19.2-image-verification-bypass-via-attestation-type-panic","title":"Third-party advisory: www.vulncheck.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: www.vulncheck.com"}],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}