{"apiVersion":"1.0","identifier":"CVE-2026-41068","description":"Kyverno is a policy engine designed for cloud native platform engineering teams. The patch for CVE-2026-22039 fixed cross-namespace privilege escalation in Kyverno-s `apiCall` context by validating the `URLPath` field. However, the ConfigMap context loader has the identical vulnerability — the `configMap.namespace` field accepts any namespace with zero validation, allowing a namespace admin to read ConfigMaps from any namespace using Kyverno-s privileged service account. This is a complete RBAC bypass in multi-tenant Kubernetes clusters. An updated fix is available in version 1.17.2.","publishedAt":"2026-04-24T04:16:19","lastModifiedAt":null,"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-41068","cvssScore":7.7,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","epssProbability":0.00266,"riskScore":0.79,"affectedProduct":"Kyverno","affectedVersions":"<1.17.2","vulnerabilityType":"Installed app","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-41068","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-41068","en":"https://www.redsauce.net/en/cves/CVE-2026-41068","fr":"https://www.redsauce.net/fr/cves/CVE-2026-41068","pt":"https://www.redsauce.net/pt/cves/CVE-2026-41068","de":"https://www.redsauce.net/de/cves/CVE-2026-41068","sk":"https://www.redsauce.net/sk/cves/CVE-2026-41068","el":"https://www.redsauce.net/el/cves/CVE-2026-41068"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-41068"}}