CVE-2026-122321

Summary

Kyverno 1.18.0–1.19.1 incorrectly caches image verification results keyed by tag (e.g., :latest) instead of by verified digest, allowing an attacker with registry write access to repoint a tag after caching a valid signature, causing Kyverno to admit unverified images.

Exploitability

Exploitation requires low-privilege access to submit Kubernetes workloads and the ability to move a container image tag in the registry (e.g., via push permissions), making it feasible for compromised developer accounts or insider threats.

Blast radius

Successful exploitation allows unverified or malicious images to run in clusters, potentially leading to supply chain compromise, data exfiltration, or cluster takeover depending on workload permissions.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Kyverno 1.19.2 or later, which binds cached verification results to the verified digest rather than the image reference string.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.