Permissions bypass in KubeVirt

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-1701 · ADVISORY
• kubevirt/kubevirt · WEB
• kubevirt/containerized-data-importer#1098 · WEB
• kubevirt/kubevirt#3001 · WEB
• kubevirt/kubevirt commit 9efa8d7 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• kubevirt/kubevirt · PACKAGE
• GitHub Advisory GHSA-849r-8wvp-4wwg · ADVISORY

Lỗ hổng khác của kubevirt.io/kubevirt

• CVE-2026-9804CAO 7.7A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vu…
• CVE-2026-7374NGHIÊM TRỌNG 9.9A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a …
• CVE-2026-6383TRUNG BÌNH 5.4A flaw was found in KubeVirt's Role-Based Access Control (RBAC) evaluation logic. The authorization mechanism improperly truncates subresour…
• CVE-2025-14525TRUNG BÌNH 6.4A flaw was found in kubevirt. A user within a virtual machine (VM), if the guest agent is active, can exploit this by causing the agent to r…
• CVE-2025-64324CAO 7.7KubeVirt is a virtual machine management add-on for Kubernetes. The `hostDisk` feature in KubeVirt allows mounting a host file or directory …