Database/Container, Kubernetes & orchestration
Kyverno: unvalidated configMap.namespace lets a namespace admin read ConfigMaps in any namespace
Impact
Kyverno's ConfigMap context loader accepts any value in configMap.namespace without checking it. A namespace admin can write a policy that makes Kyverno read ConfigMaps from other namespaces using Kyverno's privileged service account. In a multi-tenant cluster this bypasses RBAC: one tenant can read another tenant's configuration and the cluster's system namespaces. This is the same flaw the CVE-2026-22039 fix closed for apiCall, but in a second code path that fix did not cover.
Who can reach it
Authenticated user with namespace-admin rights, or any user allowed to create Kyverno policies in their namespace, on a cluster running an affected Kyverno.
What to do
Upgrade Kyverno to 1.17.2, which rolls its controller pods. Nodes and workloads are not affected. The record names no fixed version for the 1.16 line. Until you upgrade, limit who can create namespaced Kyverno Policy objects.
References
Related entries
- Kyverno: crafted forEach mutate policy crash-loops the background controller and blocks admissionCVE-2026-41485 · Kyverno (legacy engine forEach mutation handler)High
- Argo CD: ServerSideDiff exposes cleartext Kubernetes Secret data to users with app read accessCVE-2026-43824 · Argo CD (ServerSideDiff)High
- RHACM multicloud-operators-channel: managed-cluster agent reads all Secrets in hub Channel namespacesCVE-2026-73122 · Red Hat Advanced Cluster Management multicloud-operators-channel (hub subscription controller)High
- RHACM subscription controller: HelmRelease secretRef.Namespace reads Secrets from any namespaceCVE-2026-73137 · Red Hat Advanced Cluster Management multicloud-operators-subscription (HelmRelease secretRef)High
- OpenShift console: authenticated user makes the console pod fetch arbitrary URLs via a Helm chart URL (SSRF)CVE-2026-75888 · Red Hat OpenShift Container Platform console (Helm chart URL fetch)High
- RHACS Central: unbounded GraphQL query depth lets an authenticated user stall the management planeCVE-2026-9165 · Red Hat Advanced Cluster Security for Kubernetes (Central GraphQL API, query depth limit)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.