Vulnerability Details CVE-2026-122321
Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string (such as a tag) rather than bound to the verified digest, so cache hits skip signature and attestation checks. An attacker who can submit workloads and move a registry tag can warm the cache with a signed image, repoint the tag, and have Kyverno admit the workload and use mutateDigest to pin the unverified digest.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 13.6%
CVSS Severity
CVSS v3 Score 9.1