Skip to content
OpenAdvisories

Package · Go

github.com/kubevirt/kubevirt

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.8
    CVE-2026-13322

    Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service

    A flaw was found in KubeVirt's downward metrics virtio-serial server. The server reads guest requests using textproto.Reader.ReadLine(), which buffers input indefinitely until a newline character is received, with no length limit or read deadline. A user with…

    Red Hat Red Hat OpenShift Virtualization 4 docker-machine-driver-harvester kubevirt Azure Linux Wolfi Go
  • Medium 6.9
    CVE-2025-64436

    KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes

    KubeVirt is a virtual machine management add-on for Kubernetes. In 1.5.0 and earlier, the permissions granted to the virt-handler service account, such as the ability to update VMI and patch nodes, could be abused to force a VMI migration to an attacker-contr…

    KubeVirt kubevirt docker-machine-driver-harvester kubevirt Azure Linux Wolfi Go