CVE-2026-122311 | Kyverno up to 1.19.1 Resource Validation resource.get/resource.post resource privileges management

November 5, 2026 Yanac

A vulnerability identified as very critical has been detected in Kyverno up to 1.19.1. This affects the function resource.get/resource.post of the component Resource Validation. Performing a manipulation of the argument resource results in improper privilege management.

This vulnerability is reported as CVE-2026-122311. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More