{"id":"CVE-2026-122319","kind":"vulnerability","aliases":["CVE-2026-122319"],"related":[],"title":"Kyverno: crafted resources crash the policy engine via In and NotIn operators","description":"Kyverno before 1.19.2 contains a denial-of-service vulnerability in the In and NotIn operators that allows attackers to crash the policy engine via an unchecked type assertion. Attackers can submit resources whose JMESPath-evaluated values yield arrays of integers, booleans, or mixed types, triggering a panic that disrupts admission control and policy enforcement.","summary":"Kyverno versions before 1.19.2 panic in the In and NotIn operators when a value evaluates to an array of integers, booleans, or mixed types because of an unchecked type assertion. An attacker who can submit resources to the cluster can crash the policy engine and disrupt admission control and policy enforcement.","severity":"high","cvss":8.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["kubernetes","kyverno","package"],"not_affected_if":["kyverno-1.19.2-or-later"],"how_to_check":"- Check the installed Kyverno version, for example with `kubectl get deployment -n kyverno kyverno-admission-controller -o jsonpath='{.spec.template.spec.containers[0].image}'`\n- Look for policies that use the `In` or `NotIn` operators with JMESPath expressions over user-supplied resource fields","fix":"- Kyverno: upgrade to `1.19.2` or later","status":"open","published_at":"2026-11-05T03:17:24+00:00","first_seen_at":"2026-11-05T03:31:42+00:00","triaged_at":"2026-11-05T03:33:11+00:00","updated_at":"2026-11-05T03:33:11+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-05T03:33:11Z","model":"claude-haiku-5-5","output":{"fix":"- Kyverno: upgrade to `1.19.2` or later","reach":"network","title":"Kyverno: crafted resources crash the policy engine via In and NotIn operators","impact":"low","summary":"Kyverno versions before 1.19.2 panic in the In and NotIn operators when a value evaluates to an array of integers, booleans, or mixed types because of an unchecked type assertion. An attacker who can submit resources to the cluster can crash the policy engine and disrupt admission control and policy enforcement.","audience":"businesses","category":"package","nicknames":[],"who_cares":["kubernetes","kyverno"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"policy engine crashes, disrupting admission control cluster-wide","analyst_note":"Confirm whether an authenticated user is required to submit the triggering resources and which policy shapes are needed; check the vendor advisory on github.com.","how_to_check":"- Check the installed Kyverno version, for example with `kubectl get deployment -n kyverno kyverno-admission-controller -o jsonpath='{.spec.template.spec.containers[0].image}'`\n- Look for policies that use the `In` or `NotIn` operators with JMESPath expressions over user-supplied resource fields","plain_action":"","needs_analyst":true,"not_affected_if":["kyverno-1.19.2-or-later"],"who_is_affected":"Clusters running Kyverno before 1.19.2 are exposed, because the admission controller evaluates policies against submitted resources. The risk is highest where policies use In or NotIn over fields a user can set. Clusters on 1.19.2 or later, or without Kyverno, are not affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000743,"input_tokens":4295,"output_tokens":627,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-122319':15A,18A '-2026':14A,17A '1.19.2':25B,75C 'admiss':68B,124C 'allow':90C 'array':39B,112C 'assert':51B,101C 'attack':53B,91C,102C 'boolean':42B,115C 'cluster':60B 'contain':76C 'control':69B,125C 'craft':2A 'crash':4A,62B,93C 'cve':13A,16A 'denial':79C 'denial-of-servic':78C 'disrupt':67B,123C 'enforc':72B,128C 'engin':7A,65B,96C 'evalu':36B,109C 'integ':41B,114C 'jmespath':108C 'jmespath-evalu':107C 'kubernet':19B 'kyverno':1A,20B,22B,73C 'mix':44B,117C 'notin':11A,31B,87C 'oper':12A,32B,88C 'packag':21B 'panic':26B,121C 'polici':6A,64B,71B,95C,127C 'resourc':3A,57B,105C 'servic':81C 'submit':56B,104C 'trigger':119C 'type':45B,50B,100C,118C 'uncheck':49B,99C 'valu':35B,110C 'version':23B 'via':8A,97C 'vulner':82C 'whose':106C 'yield':111C","nicknames":[],"mitigations":[],"who_affected":"Clusters running Kyverno before 1.19.2 are exposed, because the admission controller evaluates policies against submitted resources. The risk is highest where policies use In or NotIn over fields a user can set. Clusters on 1.19.2 or later, or without Kyverno, are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","kubernetes","kyverno","package"],"campaign_type":null,"first_public_at":"2026-10-21T15:57:27+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-122319","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-122319","severity":null,"published_at":"2026-11-05T03:17:24+00:00","modified_at":"2026-11-05T03:17:24+00:00","first_seen_at":"2026-11-05T03:31:42+00:00","fetched_at":"2026-11-05T03:31:42+00:00","note":null}],"documents":[{"id":72718,"url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-r2p2-3892-5jjf","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-10-21T15:57:27+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"},{"id":72719,"url":"https://www.vulncheck.com/advisories/kyverno-before-1.19.2-denial-of-service-via-in-notin-operator-panic","title":"Third-party advisory: www.vulncheck.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: www.vulncheck.com"}],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}