CVE-2026-124440 · Infrastructure
NO FIX YET · SEE WHAT TO DO
Kyverno 1.19.1 before 1.19.2 lets a namespace tenant bypass the namespace restriction on apiCall by appending malformed percent-escapes to urlPath. An attacker with a namespaced Policy can make requests as the admission-controller ServiceAccount, reading other namespaces' resources and creating mutating webhooks to reach cluster admin.
first public Oct 23, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Clusters running Kyverno 1.19.1 where namespace tenants can create namespaced Policies that use apiCall. Clusters on other Kyverno versions, or where only platform admins write Policies, are less exposed. The sources do not describe a default-config condition beyond that.
Not affected if kyverno-not-1.19.1, no-tenant-policy-writes
Who cares kubernetes, kyverno, self-hosted
kubectl get deploy -n kyverno -o jsonpath='{.items[*].spec.template.spec.containers[*].image}'1.19.2 or later (the sources state 1.19.2 is the fixed version)Kyverno from 1.19.1 before 1.19.2 contains an authorization bypass vulnerability in the apiCall namespace clamp that allows namespace tenants to issue cross-namespace and cluster-scoped API requests by appending malformed percent-escapes to urlPath. Attackers can create namespaced Policies whose apiCall runs as the admission-controller ServiceAccount to read other namespaces' resources and create mutating webhooks, escalating to cluster admin.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.