CVE-2026-122305 | Kyverno up to 1.19.1 Admission Webhook substituteVariablesIfAny resource consumption

November 5, 2026 Yanac

A vulnerability was found in Kyverno up to 1.19.1. It has been rated as critical. The affected element is the function substituteVariablesIfAny of the component Admission Webhook. This manipulation causes resource consumption.

This vulnerability is registered as CVE-2026-122305. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More