Read the docs
TI-2026-64859 Aliases CVE-2026-100703GHSA-cmr3-jwxg-m6m3

Kyverno before 1.19.1 Cross-Namespace Data Access via globalcontext.Lib

Priority LOW 35CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-200.

Summary

Kyverno 1.16.0 through 1.19.0 registers the globalcontext.Lib CEL library in its policy environment without confining it to the policy's namespace, unlike the sibling libraries (resource.Lib, http.Lib, configMap loader) which are handed the policy namespace. A tenant who can create a namespaced policy (e.g. NamespacedValidatingPolicy, and likewise the namespaced mutating, deleting, generating, and image-validating policy kinds) in their own namespace can call globalContext.get("<entry>", "") and receive the full cached contents of a cluster-scoped GlobalContextEntry, including data cached from namespaces the tenant has no RBAC permission to read. No admission validation rejects such calls. Fixed in 1.19.1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00227 13th percentileScored 2026-11-07
Fix Fixed kyverno (kyverno): 1.19.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
kyvernokyverno1.16.0 to before 1.19.11.19.1Patch availableCNA
  • kyverno Vendorkyverno Affected 1.16.0 to before 1.19.1 Fixed in 1.19.1 Patch available CNA

Remediation

  • Fix · CNA kyverno (kyverno) Fixed in 1.19.1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    kyverno 1.19.1

    5 records Highest priority Priority HIGH 2 HIGH, 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2026-64863 Kyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded PathPriority HIGH 69
    • TI-2026-64860 Kyverno before 1.19.1 ImageValidatingPolicy Exception BypassPriority HIGH 69
    • TI-2026-64862 kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPathPriority MEDIUM 43
    Show all 5 records →

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-100703
  2. 2026-10-03 Alias added: GHSA-cmr3-jwxg-m6m3
  3. 2026-11-06 Affected versions changed · Red Hat
  4. 2026-11-06 CVSS score added · Red Hat

References

Advisory 1

  • TI-2024-32618 Kyverno's PolicyException objects can be created in any namespace by default CVSS 4.0HIGH 8.7
  • TI-2026-57895 Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions CVSS 4.0CRITICAL 9.4
  • TI-2026-39369 Missing authorization in kyverno CVSS 3.1CRITICAL 9.6
  • TI-2026-17733 Kyverno Cross-Namespace Privilege Escalation via Policy apiCall CVSS 3.1CRITICAL 10.0
  • TI-2026-29924 Kyverno: ServiceAccount token leaked to external servers via apiCall service URL CVSS 3.1CRITICAL 9.1
  • TI-2026-29524 kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token CVSS 3.1HIGH 8.1
See all 52 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences