CVE-2026-122311 - Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argument
CVE ID :CVE-2026-122311 Published : Nov. 5, 2026, 2:25 a.m. | 41 minutes ago Description :Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument of resource.get() and resource.post(), allowing namespaced CEL policies to escape their namespace. Tenants who...