CVE-2026-41068 | Kyverno up to 1.17.1 Kubernetes Cluster URLPath authorization (GHSA-cvq5-hhx3-f99p)

A vulnerability was found in Kyverno up to 1.17.1. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Kubernetes Cluster Handler. The manipulation of the argument URLPath leads to incorrect authorization.

This vulnerability is documented as CVE-2026-41068. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.