CVE-2026-122304 | Kyverno up to 1.19.1 Cleanup Controller authorization

November 5, 2026 Yanac

A vulnerability classified as very critical was found in Kyverno up to 1.19.1. This affects an unknown part of the component Cleanup Controller. Such manipulation leads to authorization bypass.

This vulnerability is uniquely identified as CVE-2026-122304. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More