Red Hat Container Native Virtualization 4.20

5 results · Feed

• High 8.8
  CVE-2026-13622

  Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host

  A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc/<pid>/root/ paths using net.Dial() without symlink protection. These s…

  Red Hat Red Hat Container Native Virtualization 4.17 Red Hat Container Native Virtualization 4.19 Red Hat Container Native Virtualization 4.21 Azure Linux
  Aug 12, 2026
• High 7.7
  CVE-2026-17527

  Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone

  In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI's DataVolume clone authorization accepts t…

  Red Hat Red Hat OpenShift Virtualization 4 Red Hat Container Native Virtualization 4.19 Red Hat Container Native Virtualization 4.21 Azure Linux
  Jul 27, 2026
• High 7.3
  CVE-2026-13201

  Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption

  A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. …

  Red Hat Red Hat Container Native Virtualization 4.18 Red Hat Container Native Virtualization 4.20 Red Hat Container Native Virtualization 4.17 Azure Linux
  Jun 24, 2026
• High 7.7
  CVE-2026-9804

  Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read

  A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing a symbolic link (symlink) within an exported filesystem Pers…

  Red Hat Red Hat OpenShift Virtualization 4 Red Hat Container Native Virtualization 4.17 Red Hat Container Native Virtualization 4.19 Azure Linux Wolfi Go
  May 28, 2026
• Critical 9.9
  CVE-2026-7374

  Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability

  A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacin…

  Red Hat Red Hat Container Native Virtualization 4.17 Red Hat Container Native Virtualization 4.19 Red Hat Container Native Virtualization 4.21 Azure Linux Wolfi Go
  May 26, 2026