{"id":"CVE-2026-122313","published":"2026-11-05T03:17:23.853","lastModified":"2026-11-05T03:17:23.853","description":"Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to modify resources in other namespaces through NamespacedMutatingPolicy targetMatchConstraints.expression CEL output lacking namespace checks. Attackers can emit a literal target such as another tenant's RoleBinding, which the cluster-wide background controller then mutates to add attacker subjects or alter Roles, NetworkPolicies, and ConfigMaps.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-269"],"vendors":[],"products":[],"references":[{"url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-f96w-622v-rqpq","tags":[]},{"url":"https://www.vulncheck.com/advisories/kyverno-1.17.0-before-1.19.2-cross-namespace-privilege-escalation-via-namespacedmutatingpolicy","tags":[]}],"exploitRefs":[{"url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-f96w-622v-rqpq","tags":[]}],"hasPoc":true,"ai":{"summary":"Kyverno versions before 1.19.2 allow namespace-scoped tenants to escalate privileges by crafting malicious NamespacedMutatingPolicy CEL expressions that output literal cluster-scoped resources in other namespaces, bypassing namespace isolation and enabling unauthorized modifications of RoleBindings, Roles, NetworkPolicies, and ConfigMaps via the cluster-wide background controller.","exploitability":"Exploitation requires low-privilege access to create or update a NamespacedMutatingPolicy resource and knowledge of the target namespace and resource type; no user interaction or complex tooling is needed.","blast_radius":"Successful exploitation allows attackers to compromise other tenants' security boundaries by modifying critical cluster resources such as RBAC bindings, network policies, and configurations across namespaces, potentially leading to full cluster compromise.","remediation":"Upgrade to Kyverno 1.19.2 or later, which includes namespace validation in the CEL output of NamespacedMutatingPolicy targetMatchConstraints.expression.","detection":"Monitor for NamespacedMutatingPolicy resources containing CEL expressions that emit literal resource references (e.g., 'target' objects with explicit namespace or name fields) and inspect Kyverno admission controller logs for mutations of cluster-scoped or cross-namespace resources initiated by namespace-scoped policies.","tags":["privilege-escalation","cel-injection","kyverno","rbac-bypass","namespace-isolation-bypass"],"model":"garnet-coder","analyzedAt":"2026-11-05T09:44:52.826Z"}}