RHSA-2026:20886
Vulnerability from csaf_redhat - Published: 2026-05-26 11:33 - Updated: 2026-09-09 15:40Summary
Red Hat Security Advisory: OpenShift Virtualization v4.13 Images
Severity
Important
Notes
Topic: Red Hat OpenShift Virtualization release v4.13 is now available with updates to packages and images that fix several bugs and add enhancements.
Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization v4.13 images.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host's container runtime (CRI-O) socket, an attacker can hijack virt-handler's privileged connection. This enables the attacker to access any Unix socket on the host, potentially leading to full control of the node and the entire cluster.
9.9 (Critical)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:496bb7164546ea472905bc301a8a4ae9194ec0b300ae847c30bb5a775af5d546_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:efceda8b0057ff086bad77398e617d31e2fbe8c051d865eb529fa5573d3ce4ad_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4df8ff903ba9d497fa31b868fde60e395c650afaad83abe0d962f9e67e759837_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b35e9caa43d5be32a669641b6f1b9bb3469470d6fa5031f5d2b7ee76e1f5ad15_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d4a5efb5a48f189534a22b2d0629fb3b1efa0b4275ecd80d70115aeb5ac4b700_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f615a636ab94fffe11b2ea630f94e8a03d67d703db64200d34b0f2beb55b243e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6f00da8e5170fd7cf2086e4ee276327b3830891f22b57961ae15a4c1b736df18_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a09ea726150f34343ae6ae7e6c46f1644074bc7e465b22a7b669a2cf3c909ec7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:300a50d81bd713402abd8c8d49d66f745afd7727c2b5f518a40835dc8d356ccb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:5b5fd323fe20dced9941f1e94f4d5059912bf0ec8b37be24c14934e16bc2d4b5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:3666682aaebb95e4a3427c988f66ff4a53ebd46880f0878c38f92efdf7bb61dc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e94348041cce2061b35f5db722bbf7344064b2587059146fda490cfa088949d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:6760420bed13672373bd657685e5ef58a0afe33083d0f20c5de41d6b660f9055_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:94063473d116562e4b248ca04af3d5fb1ed728414675c75bb57d0af9d80a305b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:346f31b1a107133d3a09cc4b5fee2280fab1f7492eb7de06ddd4a28f3736005c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:494c0b69213b4a3e2a82a4d46bdee65793bb631d9d036d19bdf911be30e59d6f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2b01a10d96ddc80027b162b82b5dd5f3244317db32761d9186d9b61640ce75fd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e2d08bfdd903a982b5856269690cba90ff61b868fc2f27c931c810bb421d039b_amd64 | — |
Workaround
|
Threats
Impact
Important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Virtualization release v4.13 is now available with updates to packages and images that fix several bugs and add enhancements.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.13 images.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:20886",
"url": "https://access.redhat.com/errata/RHSA-2026:20886"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-7374",
"url": "https://access.redhat.com/security/cve/CVE-2026-7374"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20886.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Virtualization v4.13 Images",
"tracking": {
"current_release_date": "2026-09-09T15:40:18+00:00",
"generator": {
"date": "2026-09-09T15:40:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.18"
}
},
"id": "RHSA-2026:20886",
"initial_release_date": "2026-05-26T11:33:33+00:00",
"revision_history": [
{
"date": "2026-05-26T11:33:33+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-09T15:40:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Container Native Virtualization 4.13",
"product": {
"name": "Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:container_native_virtualization:4.13::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Container Native Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b35e9caa43d5be32a669641b6f1b9bb3469470d6fa5031f5d2b7ee76e1f5ad15_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b35e9caa43d5be32a669641b6f1b9bb3469470d6fa5031f5d2b7ee76e1f5ad15_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b35e9caa43d5be32a669641b6f1b9bb3469470d6fa5031f5d2b7ee76e1f5ad15_amd64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3Ab35e9caa43d5be32a669641b6f1b9bb3469470d6fa5031f5d2b7ee76e1f5ad15?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999982"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d4a5efb5a48f189534a22b2d0629fb3b1efa0b4275ecd80d70115aeb5ac4b700_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d4a5efb5a48f189534a22b2d0629fb3b1efa0b4275ecd80d70115aeb5ac4b700_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d4a5efb5a48f189534a22b2d0629fb3b1efa0b4275ecd80d70115aeb5ac4b700_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3Ad4a5efb5a48f189534a22b2d0629fb3b1efa0b4275ecd80d70115aeb5ac4b700?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6f00da8e5170fd7cf2086e4ee276327b3830891f22b57961ae15a4c1b736df18_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6f00da8e5170fd7cf2086e4ee276327b3830891f22b57961ae15a4c1b736df18_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6f00da8e5170fd7cf2086e4ee276327b3830891f22b57961ae15a4c1b736df18_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A6f00da8e5170fd7cf2086e4ee276327b3830891f22b57961ae15a4c1b736df18?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:5b5fd323fe20dced9941f1e94f4d5059912bf0ec8b37be24c14934e16bc2d4b5_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:5b5fd323fe20dced9941f1e94f4d5059912bf0ec8b37be24c14934e16bc2d4b5_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:5b5fd323fe20dced9941f1e94f4d5059912bf0ec8b37be24c14934e16bc2d4b5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3A5b5fd323fe20dced9941f1e94f4d5059912bf0ec8b37be24c14934e16bc2d4b5?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999879"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e94348041cce2061b35f5db722bbf7344064b2587059146fda490cfa088949d_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e94348041cce2061b35f5db722bbf7344064b2587059146fda490cfa088949d_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e94348041cce2061b35f5db722bbf7344064b2587059146fda490cfa088949d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A5e94348041cce2061b35f5db722bbf7344064b2587059146fda490cfa088949d?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999880"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:6760420bed13672373bd657685e5ef58a0afe33083d0f20c5de41d6b660f9055_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:6760420bed13672373bd657685e5ef58a0afe33083d0f20c5de41d6b660f9055_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:6760420bed13672373bd657685e5ef58a0afe33083d0f20c5de41d6b660f9055_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A6760420bed13672373bd657685e5ef58a0afe33083d0f20c5de41d6b660f9055?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999880"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:496bb7164546ea472905bc301a8a4ae9194ec0b300ae847c30bb5a775af5d546_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:496bb7164546ea472905bc301a8a4ae9194ec0b300ae847c30bb5a775af5d546_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:496bb7164546ea472905bc301a8a4ae9194ec0b300ae847c30bb5a775af5d546_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3A496bb7164546ea472905bc301a8a4ae9194ec0b300ae847c30bb5a775af5d546?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999881"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:494c0b69213b4a3e2a82a4d46bdee65793bb631d9d036d19bdf911be30e59d6f_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:494c0b69213b4a3e2a82a4d46bdee65793bb631d9d036d19bdf911be30e59d6f_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:494c0b69213b4a3e2a82a4d46bdee65793bb631d9d036d19bdf911be30e59d6f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3A494c0b69213b4a3e2a82a4d46bdee65793bb631d9d036d19bdf911be30e59d6f?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999979"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e2d08bfdd903a982b5856269690cba90ff61b868fc2f27c931c810bb421d039b_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e2d08bfdd903a982b5856269690cba90ff61b868fc2f27c931c810bb421d039b_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e2d08bfdd903a982b5856269690cba90ff61b868fc2f27c931c810bb421d039b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3Ae2d08bfdd903a982b5856269690cba90ff61b868fc2f27c931c810bb421d039b?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999879"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4df8ff903ba9d497fa31b868fde60e395c650afaad83abe0d962f9e67e759837_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4df8ff903ba9d497fa31b868fde60e395c650afaad83abe0d962f9e67e759837_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4df8ff903ba9d497fa31b868fde60e395c650afaad83abe0d962f9e67e759837_arm64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A4df8ff903ba9d497fa31b868fde60e395c650afaad83abe0d962f9e67e759837?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999982"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f615a636ab94fffe11b2ea630f94e8a03d67d703db64200d34b0f2beb55b243e_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f615a636ab94fffe11b2ea630f94e8a03d67d703db64200d34b0f2beb55b243e_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f615a636ab94fffe11b2ea630f94e8a03d67d703db64200d34b0f2beb55b243e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3Af615a636ab94fffe11b2ea630f94e8a03d67d703db64200d34b0f2beb55b243e?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a09ea726150f34343ae6ae7e6c46f1644074bc7e465b22a7b669a2cf3c909ec7_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a09ea726150f34343ae6ae7e6c46f1644074bc7e465b22a7b669a2cf3c909ec7_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a09ea726150f34343ae6ae7e6c46f1644074bc7e465b22a7b669a2cf3c909ec7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3Aa09ea726150f34343ae6ae7e6c46f1644074bc7e465b22a7b669a2cf3c909ec7?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:300a50d81bd713402abd8c8d49d66f745afd7727c2b5f518a40835dc8d356ccb_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:300a50d81bd713402abd8c8d49d66f745afd7727c2b5f518a40835dc8d356ccb_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:300a50d81bd713402abd8c8d49d66f745afd7727c2b5f518a40835dc8d356ccb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3A300a50d81bd713402abd8c8d49d66f745afd7727c2b5f518a40835dc8d356ccb?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999879"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:3666682aaebb95e4a3427c988f66ff4a53ebd46880f0878c38f92efdf7bb61dc_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:3666682aaebb95e4a3427c988f66ff4a53ebd46880f0878c38f92efdf7bb61dc_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:3666682aaebb95e4a3427c988f66ff4a53ebd46880f0878c38f92efdf7bb61dc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A3666682aaebb95e4a3427c988f66ff4a53ebd46880f0878c38f92efdf7bb61dc?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999880"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:94063473d116562e4b248ca04af3d5fb1ed728414675c75bb57d0af9d80a305b_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:94063473d116562e4b248ca04af3d5fb1ed728414675c75bb57d0af9d80a305b_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:94063473d116562e4b248ca04af3d5fb1ed728414675c75bb57d0af9d80a305b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A94063473d116562e4b248ca04af3d5fb1ed728414675c75bb57d0af9d80a305b?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999880"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:efceda8b0057ff086bad77398e617d31e2fbe8c051d865eb529fa5573d3ce4ad_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:efceda8b0057ff086bad77398e617d31e2fbe8c051d865eb529fa5573d3ce4ad_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:efceda8b0057ff086bad77398e617d31e2fbe8c051d865eb529fa5573d3ce4ad_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3Aefceda8b0057ff086bad77398e617d31e2fbe8c051d865eb529fa5573d3ce4ad?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999881"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:346f31b1a107133d3a09cc4b5fee2280fab1f7492eb7de06ddd4a28f3736005c_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:346f31b1a107133d3a09cc4b5fee2280fab1f7492eb7de06ddd4a28f3736005c_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:346f31b1a107133d3a09cc4b5fee2280fab1f7492eb7de06ddd4a28f3736005c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3A346f31b1a107133d3a09cc4b5fee2280fab1f7492eb7de06ddd4a28f3736005c?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999979"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2b01a10d96ddc80027b162b82b5dd5f3244317db32761d9186d9b61640ce75fd_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2b01a10d96ddc80027b162b82b5dd5f3244317db32761d9186d9b61640ce75fd_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2b01a10d96ddc80027b162b82b5dd5f3244317db32761d9186d9b61640ce75fd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3A2b01a10d96ddc80027b162b82b5dd5f3244317db32761d9186d9b61640ce75fd?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1778999879"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4df8ff903ba9d497fa31b868fde60e395c650afaad83abe0d962f9e67e759837_arm64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4df8ff903ba9d497fa31b868fde60e395c650afaad83abe0d962f9e67e759837_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4df8ff903ba9d497fa31b868fde60e395c650afaad83abe0d962f9e67e759837_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b35e9caa43d5be32a669641b6f1b9bb3469470d6fa5031f5d2b7ee76e1f5ad15_amd64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b35e9caa43d5be32a669641b6f1b9bb3469470d6fa5031f5d2b7ee76e1f5ad15_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b35e9caa43d5be32a669641b6f1b9bb3469470d6fa5031f5d2b7ee76e1f5ad15_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d4a5efb5a48f189534a22b2d0629fb3b1efa0b4275ecd80d70115aeb5ac4b700_amd64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d4a5efb5a48f189534a22b2d0629fb3b1efa0b4275ecd80d70115aeb5ac4b700_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d4a5efb5a48f189534a22b2d0629fb3b1efa0b4275ecd80d70115aeb5ac4b700_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f615a636ab94fffe11b2ea630f94e8a03d67d703db64200d34b0f2beb55b243e_arm64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f615a636ab94fffe11b2ea630f94e8a03d67d703db64200d34b0f2beb55b243e_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f615a636ab94fffe11b2ea630f94e8a03d67d703db64200d34b0f2beb55b243e_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6f00da8e5170fd7cf2086e4ee276327b3830891f22b57961ae15a4c1b736df18_amd64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6f00da8e5170fd7cf2086e4ee276327b3830891f22b57961ae15a4c1b736df18_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6f00da8e5170fd7cf2086e4ee276327b3830891f22b57961ae15a4c1b736df18_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a09ea726150f34343ae6ae7e6c46f1644074bc7e465b22a7b669a2cf3c909ec7_arm64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a09ea726150f34343ae6ae7e6c46f1644074bc7e465b22a7b669a2cf3c909ec7_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a09ea726150f34343ae6ae7e6c46f1644074bc7e465b22a7b669a2cf3c909ec7_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:300a50d81bd713402abd8c8d49d66f745afd7727c2b5f518a40835dc8d356ccb_arm64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:300a50d81bd713402abd8c8d49d66f745afd7727c2b5f518a40835dc8d356ccb_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:300a50d81bd713402abd8c8d49d66f745afd7727c2b5f518a40835dc8d356ccb_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:5b5fd323fe20dced9941f1e94f4d5059912bf0ec8b37be24c14934e16bc2d4b5_amd64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:5b5fd323fe20dced9941f1e94f4d5059912bf0ec8b37be24c14934e16bc2d4b5_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:5b5fd323fe20dced9941f1e94f4d5059912bf0ec8b37be24c14934e16bc2d4b5_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:3666682aaebb95e4a3427c988f66ff4a53ebd46880f0878c38f92efdf7bb61dc_arm64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:3666682aaebb95e4a3427c988f66ff4a53ebd46880f0878c38f92efdf7bb61dc_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:3666682aaebb95e4a3427c988f66ff4a53ebd46880f0878c38f92efdf7bb61dc_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e94348041cce2061b35f5db722bbf7344064b2587059146fda490cfa088949d_amd64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e94348041cce2061b35f5db722bbf7344064b2587059146fda490cfa088949d_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e94348041cce2061b35f5db722bbf7344064b2587059146fda490cfa088949d_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:6760420bed13672373bd657685e5ef58a0afe33083d0f20c5de41d6b660f9055_amd64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:6760420bed13672373bd657685e5ef58a0afe33083d0f20c5de41d6b660f9055_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:6760420bed13672373bd657685e5ef58a0afe33083d0f20c5de41d6b660f9055_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:94063473d116562e4b248ca04af3d5fb1ed728414675c75bb57d0af9d80a305b_arm64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:94063473d116562e4b248ca04af3d5fb1ed728414675c75bb57d0af9d80a305b_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:94063473d116562e4b248ca04af3d5fb1ed728414675c75bb57d0af9d80a305b_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:496bb7164546ea472905bc301a8a4ae9194ec0b300ae847c30bb5a775af5d546_amd64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:496bb7164546ea472905bc301a8a4ae9194ec0b300ae847c30bb5a775af5d546_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:496bb7164546ea472905bc301a8a4ae9194ec0b300ae847c30bb5a775af5d546_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:efceda8b0057ff086bad77398e617d31e2fbe8c051d865eb529fa5573d3ce4ad_arm64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:efceda8b0057ff086bad77398e617d31e2fbe8c051d865eb529fa5573d3ce4ad_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:efceda8b0057ff086bad77398e617d31e2fbe8c051d865eb529fa5573d3ce4ad_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:346f31b1a107133d3a09cc4b5fee2280fab1f7492eb7de06ddd4a28f3736005c_arm64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:346f31b1a107133d3a09cc4b5fee2280fab1f7492eb7de06ddd4a28f3736005c_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:346f31b1a107133d3a09cc4b5fee2280fab1f7492eb7de06ddd4a28f3736005c_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:494c0b69213b4a3e2a82a4d46bdee65793bb631d9d036d19bdf911be30e59d6f_amd64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:494c0b69213b4a3e2a82a4d46bdee65793bb631d9d036d19bdf911be30e59d6f_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:494c0b69213b4a3e2a82a4d46bdee65793bb631d9d036d19bdf911be30e59d6f_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2b01a10d96ddc80027b162b82b5dd5f3244317db32761d9186d9b61640ce75fd_arm64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2b01a10d96ddc80027b162b82b5dd5f3244317db32761d9186d9b61640ce75fd_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2b01a10d96ddc80027b162b82b5dd5f3244317db32761d9186d9b61640ce75fd_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e2d08bfdd903a982b5856269690cba90ff61b868fc2f27c931c810bb421d039b_amd64 as a component of Red Hat Container Native Virtualization 4.13",
"product_id": "Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e2d08bfdd903a982b5856269690cba90ff61b868fc2f27c931c810bb421d039b_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e2d08bfdd903a982b5856269690cba90ff61b868fc2f27c931c810bb421d039b_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.13"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Sarah Bennert",
"Stoyan Nikolov"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-7374",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-04-22T07:20:25+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4df8ff903ba9d497fa31b868fde60e395c650afaad83abe0d962f9e67e759837_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b35e9caa43d5be32a669641b6f1b9bb3469470d6fa5031f5d2b7ee76e1f5ad15_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d4a5efb5a48f189534a22b2d0629fb3b1efa0b4275ecd80d70115aeb5ac4b700_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f615a636ab94fffe11b2ea630f94e8a03d67d703db64200d34b0f2beb55b243e_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6f00da8e5170fd7cf2086e4ee276327b3830891f22b57961ae15a4c1b736df18_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a09ea726150f34343ae6ae7e6c46f1644074bc7e465b22a7b669a2cf3c909ec7_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:300a50d81bd713402abd8c8d49d66f745afd7727c2b5f518a40835dc8d356ccb_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:5b5fd323fe20dced9941f1e94f4d5059912bf0ec8b37be24c14934e16bc2d4b5_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:3666682aaebb95e4a3427c988f66ff4a53ebd46880f0878c38f92efdf7bb61dc_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e94348041cce2061b35f5db722bbf7344064b2587059146fda490cfa088949d_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:6760420bed13672373bd657685e5ef58a0afe33083d0f20c5de41d6b660f9055_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:94063473d116562e4b248ca04af3d5fb1ed728414675c75bb57d0af9d80a305b_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:346f31b1a107133d3a09cc4b5fee2280fab1f7492eb7de06ddd4a28f3736005c_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:494c0b69213b4a3e2a82a4d46bdee65793bb631d9d036d19bdf911be30e59d6f_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2b01a10d96ddc80027b162b82b5dd5f3244317db32761d9186d9b61640ce75fd_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e2d08bfdd903a982b5856269690cba90ff61b868fc2f27c931c810bb421d039b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2463728"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in KubeVirt\u0027s virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host\u0027s container runtime (CRI-O) socket, an attacker can hijack virt-handler\u0027s privileged connection. This enables the attacker to access any Unix socket on the host, potentially leading to full control of the node and the entire cluster.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important privilege escalation flaw in KubeVirt\u0027s virt-handler component. An authenticated OpenShift user with edit permissions in a single namespace can exploit improper symlink validation to hijack virt-handler\u0027s privileged connection. This allows access to any Unix socket on the host, leading to potential full control of the node and the entire cluster.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:496bb7164546ea472905bc301a8a4ae9194ec0b300ae847c30bb5a775af5d546_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:efceda8b0057ff086bad77398e617d31e2fbe8c051d865eb529fa5573d3ce4ad_arm64"
],
"known_not_affected": [
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4df8ff903ba9d497fa31b868fde60e395c650afaad83abe0d962f9e67e759837_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b35e9caa43d5be32a669641b6f1b9bb3469470d6fa5031f5d2b7ee76e1f5ad15_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d4a5efb5a48f189534a22b2d0629fb3b1efa0b4275ecd80d70115aeb5ac4b700_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f615a636ab94fffe11b2ea630f94e8a03d67d703db64200d34b0f2beb55b243e_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6f00da8e5170fd7cf2086e4ee276327b3830891f22b57961ae15a4c1b736df18_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a09ea726150f34343ae6ae7e6c46f1644074bc7e465b22a7b669a2cf3c909ec7_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:300a50d81bd713402abd8c8d49d66f745afd7727c2b5f518a40835dc8d356ccb_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:5b5fd323fe20dced9941f1e94f4d5059912bf0ec8b37be24c14934e16bc2d4b5_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:3666682aaebb95e4a3427c988f66ff4a53ebd46880f0878c38f92efdf7bb61dc_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e94348041cce2061b35f5db722bbf7344064b2587059146fda490cfa088949d_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:6760420bed13672373bd657685e5ef58a0afe33083d0f20c5de41d6b660f9055_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:94063473d116562e4b248ca04af3d5fb1ed728414675c75bb57d0af9d80a305b_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:346f31b1a107133d3a09cc4b5fee2280fab1f7492eb7de06ddd4a28f3736005c_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:494c0b69213b4a3e2a82a4d46bdee65793bb631d9d036d19bdf911be30e59d6f_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2b01a10d96ddc80027b162b82b5dd5f3244317db32761d9186d9b61640ce75fd_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e2d08bfdd903a982b5856269690cba90ff61b868fc2f27c931c810bb421d039b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-7374"
},
{
"category": "external",
"summary": "RHBZ#2463728",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463728"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-7374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7374"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-7374",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7374"
}
],
"release_date": "2026-05-26T12:30:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:33:33+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:496bb7164546ea472905bc301a8a4ae9194ec0b300ae847c30bb5a775af5d546_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:efceda8b0057ff086bad77398e617d31e2fbe8c051d865eb529fa5573d3ce4ad_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20886"
},
{
"category": "workaround",
"details": "Update cluster RBAC to not allow exec into virt-launcher pods.",
"product_ids": [
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4df8ff903ba9d497fa31b868fde60e395c650afaad83abe0d962f9e67e759837_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b35e9caa43d5be32a669641b6f1b9bb3469470d6fa5031f5d2b7ee76e1f5ad15_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d4a5efb5a48f189534a22b2d0629fb3b1efa0b4275ecd80d70115aeb5ac4b700_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f615a636ab94fffe11b2ea630f94e8a03d67d703db64200d34b0f2beb55b243e_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6f00da8e5170fd7cf2086e4ee276327b3830891f22b57961ae15a4c1b736df18_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a09ea726150f34343ae6ae7e6c46f1644074bc7e465b22a7b669a2cf3c909ec7_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:300a50d81bd713402abd8c8d49d66f745afd7727c2b5f518a40835dc8d356ccb_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:5b5fd323fe20dced9941f1e94f4d5059912bf0ec8b37be24c14934e16bc2d4b5_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:3666682aaebb95e4a3427c988f66ff4a53ebd46880f0878c38f92efdf7bb61dc_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e94348041cce2061b35f5db722bbf7344064b2587059146fda490cfa088949d_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:6760420bed13672373bd657685e5ef58a0afe33083d0f20c5de41d6b660f9055_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:94063473d116562e4b248ca04af3d5fb1ed728414675c75bb57d0af9d80a305b_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:496bb7164546ea472905bc301a8a4ae9194ec0b300ae847c30bb5a775af5d546_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:efceda8b0057ff086bad77398e617d31e2fbe8c051d865eb529fa5573d3ce4ad_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:346f31b1a107133d3a09cc4b5fee2280fab1f7492eb7de06ddd4a28f3736005c_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:494c0b69213b4a3e2a82a4d46bdee65793bb631d9d036d19bdf911be30e59d6f_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2b01a10d96ddc80027b162b82b5dd5f3244317db32761d9186d9b61640ce75fd_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e2d08bfdd903a982b5856269690cba90ff61b868fc2f27c931c810bb421d039b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4df8ff903ba9d497fa31b868fde60e395c650afaad83abe0d962f9e67e759837_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b35e9caa43d5be32a669641b6f1b9bb3469470d6fa5031f5d2b7ee76e1f5ad15_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d4a5efb5a48f189534a22b2d0629fb3b1efa0b4275ecd80d70115aeb5ac4b700_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f615a636ab94fffe11b2ea630f94e8a03d67d703db64200d34b0f2beb55b243e_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6f00da8e5170fd7cf2086e4ee276327b3830891f22b57961ae15a4c1b736df18_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a09ea726150f34343ae6ae7e6c46f1644074bc7e465b22a7b669a2cf3c909ec7_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:300a50d81bd713402abd8c8d49d66f745afd7727c2b5f518a40835dc8d356ccb_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:5b5fd323fe20dced9941f1e94f4d5059912bf0ec8b37be24c14934e16bc2d4b5_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:3666682aaebb95e4a3427c988f66ff4a53ebd46880f0878c38f92efdf7bb61dc_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e94348041cce2061b35f5db722bbf7344064b2587059146fda490cfa088949d_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:6760420bed13672373bd657685e5ef58a0afe33083d0f20c5de41d6b660f9055_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:94063473d116562e4b248ca04af3d5fb1ed728414675c75bb57d0af9d80a305b_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:496bb7164546ea472905bc301a8a4ae9194ec0b300ae847c30bb5a775af5d546_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:efceda8b0057ff086bad77398e617d31e2fbe8c051d865eb529fa5573d3ce4ad_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:346f31b1a107133d3a09cc4b5fee2280fab1f7492eb7de06ddd4a28f3736005c_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:494c0b69213b4a3e2a82a4d46bdee65793bb631d9d036d19bdf911be30e59d6f_amd64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2b01a10d96ddc80027b162b82b5dd5f3244317db32761d9186d9b61640ce75fd_arm64",
"Red Hat Container Native Virtualization 4.13:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e2d08bfdd903a982b5856269690cba90ff61b868fc2f27c931c810bb421d039b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…