Skip to content
OpenAdvisories

Package · Go

github.com/kubevirt/kubevirt

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-64436

    KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes

    KubeVirt is a virtual machine management add-on for Kubernetes. In 1.5.0 and earlier, the permissions granted to the virt-handler service account, such as the ability to update VMI and patch nodes, could be abused to force a VMI migration to an attacker-contr…

    KubeVirt kubevirt docker-machine-driver-harvester kubevirt Azure Linux Wolfi Go