Skip to content
OpenAdvisories

Vendor

KubeVirt

9 known vulnerabilities.

Products

kubevirt 8 containerized-data-importer 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2025-64324

    KubeVirt Vulnerable to Arbitrary Host File Read and Write

    KubeVirt is a virtual machine management add-on for Kubernetes. The `hostDisk` feature in KubeVirt allows mounting a host file or directory owned by the user with UID 107 into a VM. However, prior to version 1.6.1 and 1.7.0, the implementation of this feature…

    KubeVirt kubevirt docker-machine-driver-harvester kubevirt Azure Linux Wolfi Go
  • High 8.2
    CVE-2023-26484

    On a compromised KubeVirt node, the virt-handler service account can be used to modify all node specs

    KubeVirt is a virtual machine management add-on for Kubernetes. In versions 0.59.0 and prior, if a malicious user has taken over a Kubernetes node where virt-handler (the KubeVirt node-daemon) is running, the virt-handler service account can be used to modify…

    KubeVirt kubevirt kubevirt kubevirt.io/kubevirt Azure Linux Go