https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 00:41:27 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-124440 <p>Kyverno from 1.19.1 before 1.19.2 contains an authorization bypass vulnerability in the apiCall namespace clamp that allows namespace tenants to issue cross-namespace and cluster-scoped API requests by appending malformed percent-escapes to urlPath. Attackers can create namespaced Policies whose apiCall runs as the admission-controller ServiceAccount to read other namespaces&#39; resources and create mutating webhooks, escalating to cluster admin.</p> <p>Kyverno from 1.19.1 before 1.19.2 contains an authorization bypass vulnerability in the apiCall namespace clamp that allows namespace tenants to issue cross-namespace and cluster-scoped API requests by appending malformed percent-escapes to urlPath. Attackers can create namespaced Policies whose apiCall runs as the admission-controller ServiceAccount to read other namespaces&#39; resources and create mutating webhooks, escalating to cluster admin.</p> https://db.gcve.eu/vuln/fkie_cve-2026-124440 https://db.gcve.eu/vuln/ghsa-xvrq-w385-5mfv <p>Kyverno from 1.19.1 before 1.19.2 contains an authorization bypass vulnerability in the apiCall namespace clamp that allows namespace tenants to issue cross-namespace and cluster-scoped API requests by appending malformed percent-escapes to urlPath. Attackers can create namespaced Policies whose apiCall runs as the admission-controller ServiceAccount to read other namespaces&#39; resources and create mutating webhooks, escalating to cluster admin.</p> <p>Kyverno from 1.19.1 before 1.19.2 contains an authorization bypass vulnerability in the apiCall namespace clamp that allows namespace tenants to issue cross-namespace and cluster-scoped API requests by appending malformed percent-escapes to urlPath. Attackers can create namespaced Policies whose apiCall runs as the admission-controller ServiceAccount to read other namespaces&#39; resources and create mutating webhooks, escalating to cluster admin.</p> https://db.gcve.eu/vuln/ghsa-xvrq-w385-5mfv https://db.gcve.eu/vuln/wid-sec-w-2026-4406 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kyverno ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Informationen auszulesen, Dateien zu manipulieren und seine Berechtigungen bis zum Cluster-Administrator zu erweitern.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kyverno ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Informationen auszulesen, Dateien zu manipulieren und seine Berechtigungen bis zum Cluster-Administrator zu erweitern.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4406