RHSA-2026:20866
Vulnerability from csaf_redhat - Published: 2026-05-26 11:28 - Updated: 2026-09-09 15:40Summary
Red Hat Security Advisory: OpenShift Virtualization v4.15 Images
Severity
Important
Notes
Topic: Red Hat OpenShift Virtualization release v4.15 is now available with updates to packages and images that fix several bugs and add enhancements.
Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization v4.15 images.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host's container runtime (CRI-O) socket, an attacker can hijack virt-handler's privileged connection. This enables the attacker to access any Unix socket on the host, potentially leading to full control of the node and the entire cluster.
9.9 (Critical)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:150e16ca964b4afd80b41d0ec2f3551e31ed6f18e07aaa91b49c39312a10c799_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:745e83f3037d1720236942e6afc46c2c8bd2e4cd12b1401ae49ef551acfa18fa_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:69e3be623e1a2a8dd2c601a36e06ac0614760cef133b1041209802766ce84244_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:c21abdaa83c34b79b8ad84927844c1b3d66063e883924aab9104e21153d3f3b1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:494e7ad93a6750731662684e6057c330f65b9b9d5904bf359e9cb90419c175dd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:db054ea430cddd12d2a8760a5d7ab2878026891c777f1be6fb682915d4a8539e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0b817bd92fed9f13dc995590b33c245a0031f8a7a3fc0cfe868b5174ef6e48ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:98c1ab049b34fe94978dbe48c673f6bdc3fd5f3cb7c02479b8e99df26663cadc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:5883055be1ec5976a064eab6864f777d32676dfee75f514418d124f19c591048_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a7829e988a31412b3dc58bbd9fca49dac9dbb916462809878a630927bd198deb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c0a812723505511c50b8c1bfb2eb22633b36ae3129dd0957ae2d3ae3c2498d64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec7da083282a4c9465529139a5cfe29c456e7caff7187ba9f027c936b16528f7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:9d50595d4a3cf8c53ccc50a6b52a0d325a292f155b494fe0637e5a090d664f5f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:b5aa3a6bb65703b77755dccbaa01bee659ab75bbfcf521b6d5d5bd79ae274d96_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:8eaa2bb71213b75886fcfd256f94ef0b0df2094dbdd6bce298f895724cc33fcb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c8eb889b2f8016bad49610a9ef83e6577bdbe389c59824182756b83c95c40ad3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:08f8ece3d5fbfbe9ea25b5d71046db1ec6268d3cc1901f511780bc01479c0fa6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:636bff27785b58e38b31ca3fa7d07a1a58f8537e9d72600e05a073a1e9131fb0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:0a78119c30f8ffdf86f23d8e0c544450d19bbfe01029c52e7e4c5a978e0ab441_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:ba29973c2c9343e725fc82d84b44b258c7b95ba78ff84b9fbe3132cdbdf4e34e_arm64 | — |
Workaround
|
Threats
Impact
Important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Virtualization release v4.15 is now available with updates to packages and images that fix several bugs and add enhancements.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.15 images.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:20866",
"url": "https://access.redhat.com/errata/RHSA-2026:20866"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-7374",
"url": "https://access.redhat.com/security/cve/CVE-2026-7374"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20866.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Virtualization v4.15 Images",
"tracking": {
"current_release_date": "2026-09-09T15:40:18+00:00",
"generator": {
"date": "2026-09-09T15:40:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.18"
}
},
"id": "RHSA-2026:20866",
"initial_release_date": "2026-05-26T11:28:00+00:00",
"revision_history": [
{
"date": "2026-05-26T11:28:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-09T15:40:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Container Native Virtualization 4.15",
"product": {
"name": "Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:container_native_virtualization:4.15::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Container Native Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:69e3be623e1a2a8dd2c601a36e06ac0614760cef133b1041209802766ce84244_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:69e3be623e1a2a8dd2c601a36e06ac0614760cef133b1041209802766ce84244_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:69e3be623e1a2a8dd2c601a36e06ac0614760cef133b1041209802766ce84244_amd64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A69e3be623e1a2a8dd2c601a36e06ac0614760cef133b1041209802766ce84244?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859968"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:db054ea430cddd12d2a8760a5d7ab2878026891c777f1be6fb682915d4a8539e_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:db054ea430cddd12d2a8760a5d7ab2878026891c777f1be6fb682915d4a8539e_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:db054ea430cddd12d2a8760a5d7ab2878026891c777f1be6fb682915d4a8539e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3Adb054ea430cddd12d2a8760a5d7ab2878026891c777f1be6fb682915d4a8539e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859756"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0b817bd92fed9f13dc995590b33c245a0031f8a7a3fc0cfe868b5174ef6e48ff_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0b817bd92fed9f13dc995590b33c245a0031f8a7a3fc0cfe868b5174ef6e48ff_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0b817bd92fed9f13dc995590b33c245a0031f8a7a3fc0cfe868b5174ef6e48ff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3A0b817bd92fed9f13dc995590b33c245a0031f8a7a3fc0cfe868b5174ef6e48ff?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859938"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:5883055be1ec5976a064eab6864f777d32676dfee75f514418d124f19c591048_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:5883055be1ec5976a064eab6864f777d32676dfee75f514418d124f19c591048_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:5883055be1ec5976a064eab6864f777d32676dfee75f514418d124f19c591048_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A5883055be1ec5976a064eab6864f777d32676dfee75f514418d124f19c591048?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859907"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec7da083282a4c9465529139a5cfe29c456e7caff7187ba9f027c936b16528f7_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec7da083282a4c9465529139a5cfe29c456e7caff7187ba9f027c936b16528f7_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec7da083282a4c9465529139a5cfe29c456e7caff7187ba9f027c936b16528f7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3Aec7da083282a4c9465529139a5cfe29c456e7caff7187ba9f027c936b16528f7?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859955"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:b5aa3a6bb65703b77755dccbaa01bee659ab75bbfcf521b6d5d5bd79ae274d96_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:b5aa3a6bb65703b77755dccbaa01bee659ab75bbfcf521b6d5d5bd79ae274d96_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:b5aa3a6bb65703b77755dccbaa01bee659ab75bbfcf521b6d5d5bd79ae274d96_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3Ab5aa3a6bb65703b77755dccbaa01bee659ab75bbfcf521b6d5d5bd79ae274d96?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859908"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:8eaa2bb71213b75886fcfd256f94ef0b0df2094dbdd6bce298f895724cc33fcb_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:8eaa2bb71213b75886fcfd256f94ef0b0df2094dbdd6bce298f895724cc33fcb_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:8eaa2bb71213b75886fcfd256f94ef0b0df2094dbdd6bce298f895724cc33fcb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A8eaa2bb71213b75886fcfd256f94ef0b0df2094dbdd6bce298f895724cc33fcb?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778860002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:745e83f3037d1720236942e6afc46c2c8bd2e4cd12b1401ae49ef551acfa18fa_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:745e83f3037d1720236942e6afc46c2c8bd2e4cd12b1401ae49ef551acfa18fa_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:745e83f3037d1720236942e6afc46c2c8bd2e4cd12b1401ae49ef551acfa18fa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3A745e83f3037d1720236942e6afc46c2c8bd2e4cd12b1401ae49ef551acfa18fa?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859977"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:636bff27785b58e38b31ca3fa7d07a1a58f8537e9d72600e05a073a1e9131fb0_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:636bff27785b58e38b31ca3fa7d07a1a58f8537e9d72600e05a073a1e9131fb0_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:636bff27785b58e38b31ca3fa7d07a1a58f8537e9d72600e05a073a1e9131fb0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3A636bff27785b58e38b31ca3fa7d07a1a58f8537e9d72600e05a073a1e9131fb0?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859975"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:0a78119c30f8ffdf86f23d8e0c544450d19bbfe01029c52e7e4c5a978e0ab441_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:0a78119c30f8ffdf86f23d8e0c544450d19bbfe01029c52e7e4c5a978e0ab441_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:0a78119c30f8ffdf86f23d8e0c544450d19bbfe01029c52e7e4c5a978e0ab441_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3A0a78119c30f8ffdf86f23d8e0c544450d19bbfe01029c52e7e4c5a978e0ab441?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859885"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:c21abdaa83c34b79b8ad84927844c1b3d66063e883924aab9104e21153d3f3b1_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:c21abdaa83c34b79b8ad84927844c1b3d66063e883924aab9104e21153d3f3b1_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:c21abdaa83c34b79b8ad84927844c1b3d66063e883924aab9104e21153d3f3b1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3Ac21abdaa83c34b79b8ad84927844c1b3d66063e883924aab9104e21153d3f3b1?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859968"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:494e7ad93a6750731662684e6057c330f65b9b9d5904bf359e9cb90419c175dd_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:494e7ad93a6750731662684e6057c330f65b9b9d5904bf359e9cb90419c175dd_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:494e7ad93a6750731662684e6057c330f65b9b9d5904bf359e9cb90419c175dd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3A494e7ad93a6750731662684e6057c330f65b9b9d5904bf359e9cb90419c175dd?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859756"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:98c1ab049b34fe94978dbe48c673f6bdc3fd5f3cb7c02479b8e99df26663cadc_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:98c1ab049b34fe94978dbe48c673f6bdc3fd5f3cb7c02479b8e99df26663cadc_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:98c1ab049b34fe94978dbe48c673f6bdc3fd5f3cb7c02479b8e99df26663cadc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3A98c1ab049b34fe94978dbe48c673f6bdc3fd5f3cb7c02479b8e99df26663cadc?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859938"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a7829e988a31412b3dc58bbd9fca49dac9dbb916462809878a630927bd198deb_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a7829e988a31412b3dc58bbd9fca49dac9dbb916462809878a630927bd198deb_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a7829e988a31412b3dc58bbd9fca49dac9dbb916462809878a630927bd198deb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3Aa7829e988a31412b3dc58bbd9fca49dac9dbb916462809878a630927bd198deb?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859907"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c0a812723505511c50b8c1bfb2eb22633b36ae3129dd0957ae2d3ae3c2498d64_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c0a812723505511c50b8c1bfb2eb22633b36ae3129dd0957ae2d3ae3c2498d64_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c0a812723505511c50b8c1bfb2eb22633b36ae3129dd0957ae2d3ae3c2498d64_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3Ac0a812723505511c50b8c1bfb2eb22633b36ae3129dd0957ae2d3ae3c2498d64?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859955"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:9d50595d4a3cf8c53ccc50a6b52a0d325a292f155b494fe0637e5a090d664f5f_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:9d50595d4a3cf8c53ccc50a6b52a0d325a292f155b494fe0637e5a090d664f5f_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:9d50595d4a3cf8c53ccc50a6b52a0d325a292f155b494fe0637e5a090d664f5f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A9d50595d4a3cf8c53ccc50a6b52a0d325a292f155b494fe0637e5a090d664f5f?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859908"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c8eb889b2f8016bad49610a9ef83e6577bdbe389c59824182756b83c95c40ad3_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c8eb889b2f8016bad49610a9ef83e6577bdbe389c59824182756b83c95c40ad3_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c8eb889b2f8016bad49610a9ef83e6577bdbe389c59824182756b83c95c40ad3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3Ac8eb889b2f8016bad49610a9ef83e6577bdbe389c59824182756b83c95c40ad3?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778860002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:150e16ca964b4afd80b41d0ec2f3551e31ed6f18e07aaa91b49c39312a10c799_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:150e16ca964b4afd80b41d0ec2f3551e31ed6f18e07aaa91b49c39312a10c799_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:150e16ca964b4afd80b41d0ec2f3551e31ed6f18e07aaa91b49c39312a10c799_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3A150e16ca964b4afd80b41d0ec2f3551e31ed6f18e07aaa91b49c39312a10c799?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859977"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:08f8ece3d5fbfbe9ea25b5d71046db1ec6268d3cc1901f511780bc01479c0fa6_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:08f8ece3d5fbfbe9ea25b5d71046db1ec6268d3cc1901f511780bc01479c0fa6_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:08f8ece3d5fbfbe9ea25b5d71046db1ec6268d3cc1901f511780bc01479c0fa6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3A08f8ece3d5fbfbe9ea25b5d71046db1ec6268d3cc1901f511780bc01479c0fa6?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859975"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:ba29973c2c9343e725fc82d84b44b258c7b95ba78ff84b9fbe3132cdbdf4e34e_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:ba29973c2c9343e725fc82d84b44b258c7b95ba78ff84b9fbe3132cdbdf4e34e_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:ba29973c2c9343e725fc82d84b44b258c7b95ba78ff84b9fbe3132cdbdf4e34e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3Aba29973c2c9343e725fc82d84b44b258c7b95ba78ff84b9fbe3132cdbdf4e34e?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778859885"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:69e3be623e1a2a8dd2c601a36e06ac0614760cef133b1041209802766ce84244_amd64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:69e3be623e1a2a8dd2c601a36e06ac0614760cef133b1041209802766ce84244_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:69e3be623e1a2a8dd2c601a36e06ac0614760cef133b1041209802766ce84244_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:c21abdaa83c34b79b8ad84927844c1b3d66063e883924aab9104e21153d3f3b1_arm64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:c21abdaa83c34b79b8ad84927844c1b3d66063e883924aab9104e21153d3f3b1_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:c21abdaa83c34b79b8ad84927844c1b3d66063e883924aab9104e21153d3f3b1_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:494e7ad93a6750731662684e6057c330f65b9b9d5904bf359e9cb90419c175dd_arm64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:494e7ad93a6750731662684e6057c330f65b9b9d5904bf359e9cb90419c175dd_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:494e7ad93a6750731662684e6057c330f65b9b9d5904bf359e9cb90419c175dd_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:db054ea430cddd12d2a8760a5d7ab2878026891c777f1be6fb682915d4a8539e_amd64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:db054ea430cddd12d2a8760a5d7ab2878026891c777f1be6fb682915d4a8539e_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:db054ea430cddd12d2a8760a5d7ab2878026891c777f1be6fb682915d4a8539e_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0b817bd92fed9f13dc995590b33c245a0031f8a7a3fc0cfe868b5174ef6e48ff_amd64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0b817bd92fed9f13dc995590b33c245a0031f8a7a3fc0cfe868b5174ef6e48ff_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0b817bd92fed9f13dc995590b33c245a0031f8a7a3fc0cfe868b5174ef6e48ff_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:98c1ab049b34fe94978dbe48c673f6bdc3fd5f3cb7c02479b8e99df26663cadc_arm64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:98c1ab049b34fe94978dbe48c673f6bdc3fd5f3cb7c02479b8e99df26663cadc_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:98c1ab049b34fe94978dbe48c673f6bdc3fd5f3cb7c02479b8e99df26663cadc_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:5883055be1ec5976a064eab6864f777d32676dfee75f514418d124f19c591048_amd64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:5883055be1ec5976a064eab6864f777d32676dfee75f514418d124f19c591048_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:5883055be1ec5976a064eab6864f777d32676dfee75f514418d124f19c591048_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a7829e988a31412b3dc58bbd9fca49dac9dbb916462809878a630927bd198deb_arm64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a7829e988a31412b3dc58bbd9fca49dac9dbb916462809878a630927bd198deb_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a7829e988a31412b3dc58bbd9fca49dac9dbb916462809878a630927bd198deb_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c0a812723505511c50b8c1bfb2eb22633b36ae3129dd0957ae2d3ae3c2498d64_arm64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c0a812723505511c50b8c1bfb2eb22633b36ae3129dd0957ae2d3ae3c2498d64_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c0a812723505511c50b8c1bfb2eb22633b36ae3129dd0957ae2d3ae3c2498d64_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec7da083282a4c9465529139a5cfe29c456e7caff7187ba9f027c936b16528f7_amd64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec7da083282a4c9465529139a5cfe29c456e7caff7187ba9f027c936b16528f7_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec7da083282a4c9465529139a5cfe29c456e7caff7187ba9f027c936b16528f7_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:9d50595d4a3cf8c53ccc50a6b52a0d325a292f155b494fe0637e5a090d664f5f_arm64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:9d50595d4a3cf8c53ccc50a6b52a0d325a292f155b494fe0637e5a090d664f5f_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:9d50595d4a3cf8c53ccc50a6b52a0d325a292f155b494fe0637e5a090d664f5f_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:b5aa3a6bb65703b77755dccbaa01bee659ab75bbfcf521b6d5d5bd79ae274d96_amd64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:b5aa3a6bb65703b77755dccbaa01bee659ab75bbfcf521b6d5d5bd79ae274d96_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:b5aa3a6bb65703b77755dccbaa01bee659ab75bbfcf521b6d5d5bd79ae274d96_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:8eaa2bb71213b75886fcfd256f94ef0b0df2094dbdd6bce298f895724cc33fcb_amd64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:8eaa2bb71213b75886fcfd256f94ef0b0df2094dbdd6bce298f895724cc33fcb_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:8eaa2bb71213b75886fcfd256f94ef0b0df2094dbdd6bce298f895724cc33fcb_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c8eb889b2f8016bad49610a9ef83e6577bdbe389c59824182756b83c95c40ad3_arm64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c8eb889b2f8016bad49610a9ef83e6577bdbe389c59824182756b83c95c40ad3_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c8eb889b2f8016bad49610a9ef83e6577bdbe389c59824182756b83c95c40ad3_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:150e16ca964b4afd80b41d0ec2f3551e31ed6f18e07aaa91b49c39312a10c799_arm64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:150e16ca964b4afd80b41d0ec2f3551e31ed6f18e07aaa91b49c39312a10c799_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:150e16ca964b4afd80b41d0ec2f3551e31ed6f18e07aaa91b49c39312a10c799_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:745e83f3037d1720236942e6afc46c2c8bd2e4cd12b1401ae49ef551acfa18fa_amd64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:745e83f3037d1720236942e6afc46c2c8bd2e4cd12b1401ae49ef551acfa18fa_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:745e83f3037d1720236942e6afc46c2c8bd2e4cd12b1401ae49ef551acfa18fa_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:08f8ece3d5fbfbe9ea25b5d71046db1ec6268d3cc1901f511780bc01479c0fa6_arm64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:08f8ece3d5fbfbe9ea25b5d71046db1ec6268d3cc1901f511780bc01479c0fa6_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:08f8ece3d5fbfbe9ea25b5d71046db1ec6268d3cc1901f511780bc01479c0fa6_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:636bff27785b58e38b31ca3fa7d07a1a58f8537e9d72600e05a073a1e9131fb0_amd64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:636bff27785b58e38b31ca3fa7d07a1a58f8537e9d72600e05a073a1e9131fb0_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:636bff27785b58e38b31ca3fa7d07a1a58f8537e9d72600e05a073a1e9131fb0_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:0a78119c30f8ffdf86f23d8e0c544450d19bbfe01029c52e7e4c5a978e0ab441_amd64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:0a78119c30f8ffdf86f23d8e0c544450d19bbfe01029c52e7e4c5a978e0ab441_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:0a78119c30f8ffdf86f23d8e0c544450d19bbfe01029c52e7e4c5a978e0ab441_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:ba29973c2c9343e725fc82d84b44b258c7b95ba78ff84b9fbe3132cdbdf4e34e_arm64 as a component of Red Hat Container Native Virtualization 4.15",
"product_id": "Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:ba29973c2c9343e725fc82d84b44b258c7b95ba78ff84b9fbe3132cdbdf4e34e_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:ba29973c2c9343e725fc82d84b44b258c7b95ba78ff84b9fbe3132cdbdf4e34e_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.15"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Sarah Bennert",
"Stoyan Nikolov"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-7374",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-04-22T07:20:25+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:69e3be623e1a2a8dd2c601a36e06ac0614760cef133b1041209802766ce84244_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:c21abdaa83c34b79b8ad84927844c1b3d66063e883924aab9104e21153d3f3b1_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:494e7ad93a6750731662684e6057c330f65b9b9d5904bf359e9cb90419c175dd_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:db054ea430cddd12d2a8760a5d7ab2878026891c777f1be6fb682915d4a8539e_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0b817bd92fed9f13dc995590b33c245a0031f8a7a3fc0cfe868b5174ef6e48ff_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:98c1ab049b34fe94978dbe48c673f6bdc3fd5f3cb7c02479b8e99df26663cadc_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:5883055be1ec5976a064eab6864f777d32676dfee75f514418d124f19c591048_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a7829e988a31412b3dc58bbd9fca49dac9dbb916462809878a630927bd198deb_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c0a812723505511c50b8c1bfb2eb22633b36ae3129dd0957ae2d3ae3c2498d64_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec7da083282a4c9465529139a5cfe29c456e7caff7187ba9f027c936b16528f7_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:9d50595d4a3cf8c53ccc50a6b52a0d325a292f155b494fe0637e5a090d664f5f_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:b5aa3a6bb65703b77755dccbaa01bee659ab75bbfcf521b6d5d5bd79ae274d96_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:8eaa2bb71213b75886fcfd256f94ef0b0df2094dbdd6bce298f895724cc33fcb_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c8eb889b2f8016bad49610a9ef83e6577bdbe389c59824182756b83c95c40ad3_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:08f8ece3d5fbfbe9ea25b5d71046db1ec6268d3cc1901f511780bc01479c0fa6_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:636bff27785b58e38b31ca3fa7d07a1a58f8537e9d72600e05a073a1e9131fb0_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:0a78119c30f8ffdf86f23d8e0c544450d19bbfe01029c52e7e4c5a978e0ab441_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:ba29973c2c9343e725fc82d84b44b258c7b95ba78ff84b9fbe3132cdbdf4e34e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2463728"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in KubeVirt\u0027s virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host\u0027s container runtime (CRI-O) socket, an attacker can hijack virt-handler\u0027s privileged connection. This enables the attacker to access any Unix socket on the host, potentially leading to full control of the node and the entire cluster.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important privilege escalation flaw in KubeVirt\u0027s virt-handler component. An authenticated OpenShift user with edit permissions in a single namespace can exploit improper symlink validation to hijack virt-handler\u0027s privileged connection. This allows access to any Unix socket on the host, leading to potential full control of the node and the entire cluster.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:150e16ca964b4afd80b41d0ec2f3551e31ed6f18e07aaa91b49c39312a10c799_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:745e83f3037d1720236942e6afc46c2c8bd2e4cd12b1401ae49ef551acfa18fa_amd64"
],
"known_not_affected": [
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:69e3be623e1a2a8dd2c601a36e06ac0614760cef133b1041209802766ce84244_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:c21abdaa83c34b79b8ad84927844c1b3d66063e883924aab9104e21153d3f3b1_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:494e7ad93a6750731662684e6057c330f65b9b9d5904bf359e9cb90419c175dd_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:db054ea430cddd12d2a8760a5d7ab2878026891c777f1be6fb682915d4a8539e_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0b817bd92fed9f13dc995590b33c245a0031f8a7a3fc0cfe868b5174ef6e48ff_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:98c1ab049b34fe94978dbe48c673f6bdc3fd5f3cb7c02479b8e99df26663cadc_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:5883055be1ec5976a064eab6864f777d32676dfee75f514418d124f19c591048_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a7829e988a31412b3dc58bbd9fca49dac9dbb916462809878a630927bd198deb_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c0a812723505511c50b8c1bfb2eb22633b36ae3129dd0957ae2d3ae3c2498d64_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec7da083282a4c9465529139a5cfe29c456e7caff7187ba9f027c936b16528f7_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:9d50595d4a3cf8c53ccc50a6b52a0d325a292f155b494fe0637e5a090d664f5f_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:b5aa3a6bb65703b77755dccbaa01bee659ab75bbfcf521b6d5d5bd79ae274d96_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:8eaa2bb71213b75886fcfd256f94ef0b0df2094dbdd6bce298f895724cc33fcb_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c8eb889b2f8016bad49610a9ef83e6577bdbe389c59824182756b83c95c40ad3_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:08f8ece3d5fbfbe9ea25b5d71046db1ec6268d3cc1901f511780bc01479c0fa6_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:636bff27785b58e38b31ca3fa7d07a1a58f8537e9d72600e05a073a1e9131fb0_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:0a78119c30f8ffdf86f23d8e0c544450d19bbfe01029c52e7e4c5a978e0ab441_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:ba29973c2c9343e725fc82d84b44b258c7b95ba78ff84b9fbe3132cdbdf4e34e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-7374"
},
{
"category": "external",
"summary": "RHBZ#2463728",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463728"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-7374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7374"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-7374",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7374"
}
],
"release_date": "2026-05-26T12:30:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:28:00+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:150e16ca964b4afd80b41d0ec2f3551e31ed6f18e07aaa91b49c39312a10c799_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:745e83f3037d1720236942e6afc46c2c8bd2e4cd12b1401ae49ef551acfa18fa_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20866"
},
{
"category": "workaround",
"details": "Update cluster RBAC to not allow exec into virt-launcher pods.",
"product_ids": [
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:69e3be623e1a2a8dd2c601a36e06ac0614760cef133b1041209802766ce84244_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:c21abdaa83c34b79b8ad84927844c1b3d66063e883924aab9104e21153d3f3b1_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:494e7ad93a6750731662684e6057c330f65b9b9d5904bf359e9cb90419c175dd_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:db054ea430cddd12d2a8760a5d7ab2878026891c777f1be6fb682915d4a8539e_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0b817bd92fed9f13dc995590b33c245a0031f8a7a3fc0cfe868b5174ef6e48ff_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:98c1ab049b34fe94978dbe48c673f6bdc3fd5f3cb7c02479b8e99df26663cadc_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:5883055be1ec5976a064eab6864f777d32676dfee75f514418d124f19c591048_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a7829e988a31412b3dc58bbd9fca49dac9dbb916462809878a630927bd198deb_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c0a812723505511c50b8c1bfb2eb22633b36ae3129dd0957ae2d3ae3c2498d64_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec7da083282a4c9465529139a5cfe29c456e7caff7187ba9f027c936b16528f7_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:9d50595d4a3cf8c53ccc50a6b52a0d325a292f155b494fe0637e5a090d664f5f_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:b5aa3a6bb65703b77755dccbaa01bee659ab75bbfcf521b6d5d5bd79ae274d96_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:8eaa2bb71213b75886fcfd256f94ef0b0df2094dbdd6bce298f895724cc33fcb_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c8eb889b2f8016bad49610a9ef83e6577bdbe389c59824182756b83c95c40ad3_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:150e16ca964b4afd80b41d0ec2f3551e31ed6f18e07aaa91b49c39312a10c799_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:745e83f3037d1720236942e6afc46c2c8bd2e4cd12b1401ae49ef551acfa18fa_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:08f8ece3d5fbfbe9ea25b5d71046db1ec6268d3cc1901f511780bc01479c0fa6_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:636bff27785b58e38b31ca3fa7d07a1a58f8537e9d72600e05a073a1e9131fb0_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:0a78119c30f8ffdf86f23d8e0c544450d19bbfe01029c52e7e4c5a978e0ab441_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:ba29973c2c9343e725fc82d84b44b258c7b95ba78ff84b9fbe3132cdbdf4e34e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:69e3be623e1a2a8dd2c601a36e06ac0614760cef133b1041209802766ce84244_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:c21abdaa83c34b79b8ad84927844c1b3d66063e883924aab9104e21153d3f3b1_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:494e7ad93a6750731662684e6057c330f65b9b9d5904bf359e9cb90419c175dd_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:db054ea430cddd12d2a8760a5d7ab2878026891c777f1be6fb682915d4a8539e_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0b817bd92fed9f13dc995590b33c245a0031f8a7a3fc0cfe868b5174ef6e48ff_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:98c1ab049b34fe94978dbe48c673f6bdc3fd5f3cb7c02479b8e99df26663cadc_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:5883055be1ec5976a064eab6864f777d32676dfee75f514418d124f19c591048_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a7829e988a31412b3dc58bbd9fca49dac9dbb916462809878a630927bd198deb_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c0a812723505511c50b8c1bfb2eb22633b36ae3129dd0957ae2d3ae3c2498d64_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec7da083282a4c9465529139a5cfe29c456e7caff7187ba9f027c936b16528f7_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:9d50595d4a3cf8c53ccc50a6b52a0d325a292f155b494fe0637e5a090d664f5f_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:b5aa3a6bb65703b77755dccbaa01bee659ab75bbfcf521b6d5d5bd79ae274d96_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:8eaa2bb71213b75886fcfd256f94ef0b0df2094dbdd6bce298f895724cc33fcb_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c8eb889b2f8016bad49610a9ef83e6577bdbe389c59824182756b83c95c40ad3_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:150e16ca964b4afd80b41d0ec2f3551e31ed6f18e07aaa91b49c39312a10c799_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:745e83f3037d1720236942e6afc46c2c8bd2e4cd12b1401ae49ef551acfa18fa_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:08f8ece3d5fbfbe9ea25b5d71046db1ec6268d3cc1901f511780bc01479c0fa6_arm64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:636bff27785b58e38b31ca3fa7d07a1a58f8537e9d72600e05a073a1e9131fb0_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:0a78119c30f8ffdf86f23d8e0c544450d19bbfe01029c52e7e4c5a978e0ab441_amd64",
"Red Hat Container Native Virtualization 4.15:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:ba29973c2c9343e725fc82d84b44b258c7b95ba78ff84b9fbe3132cdbdf4e34e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…