#Multi-Tenancy
All CosmicBytez Labs articles tagged #Multi-Tenancy, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-122303: Kyverno NamespacedMutatingPolicy Overwrites Resources in Other Namespaces
Kyverno 1.17.0 to before 1.19.2 lets namespace tenants overwrite other namespaces' resources via mutate-existing CEL expressions (CVSS 9.9).
- Security
CVE-2026-122304: Kyverno CleanupPolicy Context Loader Lets Namespace Admins Escape Confinement
Kyverno 1.17.0 to before 1.19.2 builds the cleanup controller's context loader with a nil policy, so namespaced CleanupPolicies escape confinement (CVSS 9.9).
- Security
CVE-2026-122310: Kyverno apiCall urlPath Validation Bypass Reaches Cluster-Scoped Endpoints
Kyverno 1.19.1 validates a cleaned urlPath but runs the raw one; hiding ../ behind # or ? lets namespace users reach cluster endpoints (CVSS 9.9).
- Security
CVE-2026-122311: Kyverno CEL resource.get() Path Traversal Escapes Namespace
Kyverno 1.16.0 to before 1.19.2 does not validate path segments in resource.get() and resource.post(), letting tenants reach cluster resources (CVSS 9.9).
- Security
CVE-2026-63692: Dell CSM Authorization Proxy Missing Authentication Allows Cross-Tenant Admin Takeover
A missing authentication flaw in Dell CSM's authorization proxy lets unauthenticated attackers gain admin privileges across tenants.
- Security
CVE-2026-25199: Apache CloudStack Proxmox Extension Allows
A critical tenant isolation vulnerability in Apache CloudStack's Proxmox extension (CVSS 9.1) allows one tenant to access and control VM instances...