CVE-2026-100706 | Kyverno up to 1.19.0 Policy urlPath path traversal

September 26, 2026 Yanac

A vulnerability was found in Kyverno up to 1.19.0. It has been classified as critical. This affects an unknown part of the component Policy. Performing a manipulation of the argument urlPath results in path traversal.

This vulnerability is cataloged as CVE-2026-100706. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More