A vulnerability categorized as critical has been discovered in Kyverno up to 1.15.2/1.16.2. This issue affects some unknown processing of the component Admission Controller Service. The manipulation results in improper privilege management.

This vulnerability is known as CVE-2026-22039. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.