RHSA-2026:20890
Vulnerability from csaf_redhat - Published: 2026-05-26 11:34 - Updated: 2026-09-09 15:40Summary
Red Hat Security Advisory: OpenShift Virtualization v4.14 Images
Severity
Important
Notes
Topic: Red Hat OpenShift Virtualization release v4.14 is now available with updates to packages and images that fix several bugs and add enhancements.
Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization v4.14 images.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host's container runtime (CRI-O) socket, an attacker can hijack virt-handler's privileged connection. This enables the attacker to access any Unix socket on the host, potentially leading to full control of the node and the entire cluster.
9.9 (Critical)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:136f6df755b01ebc36a1d395b9afa45d3f8100bcdee95e9ead614bb6795348d0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:7c090185b0d5e89ce52076de7774557581bddb4bbca04763695589cb3bc4c33d_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:7544ebe278319575f271515132bcb8f38738f69fd67f20264bef291f4ba678c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f8b8ced889bfbb090f24612be140cba9c844d5e232078868f21c2834785cd45b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:66b1038270059c399b70eda7c652e6f235e9229848ffe4a99f9c7e3a01bf4fe5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9848cf40c43e015e81e577b1b3edc2a8274093ed3f24c84e1a374ef1acfce538_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:60a632f64ad139fd2c1647dc76dfb288232c83ca6c1786c7653d6d5e1dbbd90c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:69d382de9dd596e18d123809dc5aaaf249ba88444edf38f60770e94a36c3cf31_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:63ddbc45da0474b5543c8ab4d1801f2d89415a9afc5c799f21f517212d43cb96_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:cad2524c9a025cb89647fbabdff7815d89a1a29c4dfb1a5903937efa4283621e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b409c5d30eb925291af46505647f7ac0c3966d59506fdee1e233cc773a8f9d95_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d4689fa0755d3003dc0b42754641677a161c0f307a496399022412a7dc032496_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e9f2391e096ca68407ca0ff0694e5e96408fb5189f8db0c6353bd3017a13b14c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:f7dbaf3e1fcdf19ac944bf97b4376116f9073fc94f8a50d83c7dc74600fcf1e2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:14bce82fd9c7b7e0c35142228c89e184fea03134c8a710f8e478cd63af5cbdcc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c6731323059e26a672afbf9ddb08292f97dd79814a6d09bae53ff75bf51924ac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:1e6e40e659da6f55601d3109f6980550c876ffe780774d5a619e6edf673f80ea_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:65dd5d374df30a567aaf21633b5f3d619a841172c23e92477b26c984bee46d8c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1f04caa2c54df86a12e5de05d1628a9dca26cfcea9de0e3e80451d61de3c6c07_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:8e382cd3bdb92b62eccdcd9e46e58a75debb6b6a75db1faee879b3b430028b70_arm64 | — |
Workaround
|
Threats
Impact
Important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Virtualization release v4.14 is now available with updates to packages and images that fix several bugs and add enhancements.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.14 images.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:20890",
"url": "https://access.redhat.com/errata/RHSA-2026:20890"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-7374",
"url": "https://access.redhat.com/security/cve/CVE-2026-7374"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20890.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Virtualization v4.14 Images",
"tracking": {
"current_release_date": "2026-09-09T15:40:19+00:00",
"generator": {
"date": "2026-09-09T15:40:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.18"
}
},
"id": "RHSA-2026:20890",
"initial_release_date": "2026-05-26T11:34:22+00:00",
"revision_history": [
{
"date": "2026-05-26T11:34:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-09T15:40:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Container Native Virtualization 4.14",
"product": {
"name": "Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:container_native_virtualization:4.14::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Container Native Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f8b8ced889bfbb090f24612be140cba9c844d5e232078868f21c2834785cd45b_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f8b8ced889bfbb090f24612be140cba9c844d5e232078868f21c2834785cd45b_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f8b8ced889bfbb090f24612be140cba9c844d5e232078868f21c2834785cd45b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3Af8b8ced889bfbb090f24612be140cba9c844d5e232078868f21c2834785cd45b?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321546"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:66b1038270059c399b70eda7c652e6f235e9229848ffe4a99f9c7e3a01bf4fe5_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:66b1038270059c399b70eda7c652e6f235e9229848ffe4a99f9c7e3a01bf4fe5_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:66b1038270059c399b70eda7c652e6f235e9229848ffe4a99f9c7e3a01bf4fe5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3A66b1038270059c399b70eda7c652e6f235e9229848ffe4a99f9c7e3a01bf4fe5?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321475"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:69d382de9dd596e18d123809dc5aaaf249ba88444edf38f60770e94a36c3cf31_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:69d382de9dd596e18d123809dc5aaaf249ba88444edf38f60770e94a36c3cf31_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:69d382de9dd596e18d123809dc5aaaf249ba88444edf38f60770e94a36c3cf31_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3A69d382de9dd596e18d123809dc5aaaf249ba88444edf38f60770e94a36c3cf31?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321557"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:cad2524c9a025cb89647fbabdff7815d89a1a29c4dfb1a5903937efa4283621e_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:cad2524c9a025cb89647fbabdff7815d89a1a29c4dfb1a5903937efa4283621e_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:cad2524c9a025cb89647fbabdff7815d89a1a29c4dfb1a5903937efa4283621e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3Acad2524c9a025cb89647fbabdff7815d89a1a29c4dfb1a5903937efa4283621e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321575"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b409c5d30eb925291af46505647f7ac0c3966d59506fdee1e233cc773a8f9d95_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b409c5d30eb925291af46505647f7ac0c3966d59506fdee1e233cc773a8f9d95_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b409c5d30eb925291af46505647f7ac0c3966d59506fdee1e233cc773a8f9d95_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3Ab409c5d30eb925291af46505647f7ac0c3966d59506fdee1e233cc773a8f9d95?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321446"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e9f2391e096ca68407ca0ff0694e5e96408fb5189f8db0c6353bd3017a13b14c_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e9f2391e096ca68407ca0ff0694e5e96408fb5189f8db0c6353bd3017a13b14c_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e9f2391e096ca68407ca0ff0694e5e96408fb5189f8db0c6353bd3017a13b14c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3Ae9f2391e096ca68407ca0ff0694e5e96408fb5189f8db0c6353bd3017a13b14c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321406"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:14bce82fd9c7b7e0c35142228c89e184fea03134c8a710f8e478cd63af5cbdcc_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:14bce82fd9c7b7e0c35142228c89e184fea03134c8a710f8e478cd63af5cbdcc_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:14bce82fd9c7b7e0c35142228c89e184fea03134c8a710f8e478cd63af5cbdcc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A14bce82fd9c7b7e0c35142228c89e184fea03134c8a710f8e478cd63af5cbdcc?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321531"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:7c090185b0d5e89ce52076de7774557581bddb4bbca04763695589cb3bc4c33d_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:7c090185b0d5e89ce52076de7774557581bddb4bbca04763695589cb3bc4c33d_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:7c090185b0d5e89ce52076de7774557581bddb4bbca04763695589cb3bc4c33d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3A7c090185b0d5e89ce52076de7774557581bddb4bbca04763695589cb3bc4c33d?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321599"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:1e6e40e659da6f55601d3109f6980550c876ffe780774d5a619e6edf673f80ea_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:1e6e40e659da6f55601d3109f6980550c876ffe780774d5a619e6edf673f80ea_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:1e6e40e659da6f55601d3109f6980550c876ffe780774d5a619e6edf673f80ea_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3A1e6e40e659da6f55601d3109f6980550c876ffe780774d5a619e6edf673f80ea?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321622"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1f04caa2c54df86a12e5de05d1628a9dca26cfcea9de0e3e80451d61de3c6c07_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1f04caa2c54df86a12e5de05d1628a9dca26cfcea9de0e3e80451d61de3c6c07_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1f04caa2c54df86a12e5de05d1628a9dca26cfcea9de0e3e80451d61de3c6c07_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3A1f04caa2c54df86a12e5de05d1628a9dca26cfcea9de0e3e80451d61de3c6c07?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321472"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:7544ebe278319575f271515132bcb8f38738f69fd67f20264bef291f4ba678c4_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:7544ebe278319575f271515132bcb8f38738f69fd67f20264bef291f4ba678c4_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:7544ebe278319575f271515132bcb8f38738f69fd67f20264bef291f4ba678c4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A7544ebe278319575f271515132bcb8f38738f69fd67f20264bef291f4ba678c4?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321546"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9848cf40c43e015e81e577b1b3edc2a8274093ed3f24c84e1a374ef1acfce538_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9848cf40c43e015e81e577b1b3edc2a8274093ed3f24c84e1a374ef1acfce538_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9848cf40c43e015e81e577b1b3edc2a8274093ed3f24c84e1a374ef1acfce538_arm64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3A9848cf40c43e015e81e577b1b3edc2a8274093ed3f24c84e1a374ef1acfce538?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321475"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:60a632f64ad139fd2c1647dc76dfb288232c83ca6c1786c7653d6d5e1dbbd90c_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:60a632f64ad139fd2c1647dc76dfb288232c83ca6c1786c7653d6d5e1dbbd90c_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:60a632f64ad139fd2c1647dc76dfb288232c83ca6c1786c7653d6d5e1dbbd90c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3A60a632f64ad139fd2c1647dc76dfb288232c83ca6c1786c7653d6d5e1dbbd90c?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321557"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:63ddbc45da0474b5543c8ab4d1801f2d89415a9afc5c799f21f517212d43cb96_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:63ddbc45da0474b5543c8ab4d1801f2d89415a9afc5c799f21f517212d43cb96_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:63ddbc45da0474b5543c8ab4d1801f2d89415a9afc5c799f21f517212d43cb96_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A63ddbc45da0474b5543c8ab4d1801f2d89415a9afc5c799f21f517212d43cb96?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321575"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d4689fa0755d3003dc0b42754641677a161c0f307a496399022412a7dc032496_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d4689fa0755d3003dc0b42754641677a161c0f307a496399022412a7dc032496_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d4689fa0755d3003dc0b42754641677a161c0f307a496399022412a7dc032496_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3Ad4689fa0755d3003dc0b42754641677a161c0f307a496399022412a7dc032496?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321446"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:f7dbaf3e1fcdf19ac944bf97b4376116f9073fc94f8a50d83c7dc74600fcf1e2_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:f7dbaf3e1fcdf19ac944bf97b4376116f9073fc94f8a50d83c7dc74600fcf1e2_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:f7dbaf3e1fcdf19ac944bf97b4376116f9073fc94f8a50d83c7dc74600fcf1e2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3Af7dbaf3e1fcdf19ac944bf97b4376116f9073fc94f8a50d83c7dc74600fcf1e2?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321406"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c6731323059e26a672afbf9ddb08292f97dd79814a6d09bae53ff75bf51924ac_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c6731323059e26a672afbf9ddb08292f97dd79814a6d09bae53ff75bf51924ac_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c6731323059e26a672afbf9ddb08292f97dd79814a6d09bae53ff75bf51924ac_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3Ac6731323059e26a672afbf9ddb08292f97dd79814a6d09bae53ff75bf51924ac?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321531"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:136f6df755b01ebc36a1d395b9afa45d3f8100bcdee95e9ead614bb6795348d0_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:136f6df755b01ebc36a1d395b9afa45d3f8100bcdee95e9ead614bb6795348d0_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:136f6df755b01ebc36a1d395b9afa45d3f8100bcdee95e9ead614bb6795348d0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3A136f6df755b01ebc36a1d395b9afa45d3f8100bcdee95e9ead614bb6795348d0?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321599"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:65dd5d374df30a567aaf21633b5f3d619a841172c23e92477b26c984bee46d8c_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:65dd5d374df30a567aaf21633b5f3d619a841172c23e92477b26c984bee46d8c_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:65dd5d374df30a567aaf21633b5f3d619a841172c23e92477b26c984bee46d8c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3A65dd5d374df30a567aaf21633b5f3d619a841172c23e92477b26c984bee46d8c?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321622"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:8e382cd3bdb92b62eccdcd9e46e58a75debb6b6a75db1faee879b3b430028b70_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:8e382cd3bdb92b62eccdcd9e46e58a75debb6b6a75db1faee879b3b430028b70_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:8e382cd3bdb92b62eccdcd9e46e58a75debb6b6a75db1faee879b3b430028b70_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3A8e382cd3bdb92b62eccdcd9e46e58a75debb6b6a75db1faee879b3b430028b70?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization\u0026tag=1779321472"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:7544ebe278319575f271515132bcb8f38738f69fd67f20264bef291f4ba678c4_arm64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:7544ebe278319575f271515132bcb8f38738f69fd67f20264bef291f4ba678c4_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:7544ebe278319575f271515132bcb8f38738f69fd67f20264bef291f4ba678c4_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f8b8ced889bfbb090f24612be140cba9c844d5e232078868f21c2834785cd45b_amd64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f8b8ced889bfbb090f24612be140cba9c844d5e232078868f21c2834785cd45b_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f8b8ced889bfbb090f24612be140cba9c844d5e232078868f21c2834785cd45b_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:66b1038270059c399b70eda7c652e6f235e9229848ffe4a99f9c7e3a01bf4fe5_amd64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:66b1038270059c399b70eda7c652e6f235e9229848ffe4a99f9c7e3a01bf4fe5_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:66b1038270059c399b70eda7c652e6f235e9229848ffe4a99f9c7e3a01bf4fe5_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9848cf40c43e015e81e577b1b3edc2a8274093ed3f24c84e1a374ef1acfce538_arm64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9848cf40c43e015e81e577b1b3edc2a8274093ed3f24c84e1a374ef1acfce538_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9848cf40c43e015e81e577b1b3edc2a8274093ed3f24c84e1a374ef1acfce538_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:60a632f64ad139fd2c1647dc76dfb288232c83ca6c1786c7653d6d5e1dbbd90c_arm64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:60a632f64ad139fd2c1647dc76dfb288232c83ca6c1786c7653d6d5e1dbbd90c_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:60a632f64ad139fd2c1647dc76dfb288232c83ca6c1786c7653d6d5e1dbbd90c_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:69d382de9dd596e18d123809dc5aaaf249ba88444edf38f60770e94a36c3cf31_amd64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:69d382de9dd596e18d123809dc5aaaf249ba88444edf38f60770e94a36c3cf31_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:69d382de9dd596e18d123809dc5aaaf249ba88444edf38f60770e94a36c3cf31_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:63ddbc45da0474b5543c8ab4d1801f2d89415a9afc5c799f21f517212d43cb96_arm64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:63ddbc45da0474b5543c8ab4d1801f2d89415a9afc5c799f21f517212d43cb96_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:63ddbc45da0474b5543c8ab4d1801f2d89415a9afc5c799f21f517212d43cb96_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:cad2524c9a025cb89647fbabdff7815d89a1a29c4dfb1a5903937efa4283621e_amd64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:cad2524c9a025cb89647fbabdff7815d89a1a29c4dfb1a5903937efa4283621e_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:cad2524c9a025cb89647fbabdff7815d89a1a29c4dfb1a5903937efa4283621e_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b409c5d30eb925291af46505647f7ac0c3966d59506fdee1e233cc773a8f9d95_amd64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b409c5d30eb925291af46505647f7ac0c3966d59506fdee1e233cc773a8f9d95_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b409c5d30eb925291af46505647f7ac0c3966d59506fdee1e233cc773a8f9d95_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d4689fa0755d3003dc0b42754641677a161c0f307a496399022412a7dc032496_arm64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d4689fa0755d3003dc0b42754641677a161c0f307a496399022412a7dc032496_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d4689fa0755d3003dc0b42754641677a161c0f307a496399022412a7dc032496_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e9f2391e096ca68407ca0ff0694e5e96408fb5189f8db0c6353bd3017a13b14c_amd64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e9f2391e096ca68407ca0ff0694e5e96408fb5189f8db0c6353bd3017a13b14c_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e9f2391e096ca68407ca0ff0694e5e96408fb5189f8db0c6353bd3017a13b14c_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:f7dbaf3e1fcdf19ac944bf97b4376116f9073fc94f8a50d83c7dc74600fcf1e2_arm64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:f7dbaf3e1fcdf19ac944bf97b4376116f9073fc94f8a50d83c7dc74600fcf1e2_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:f7dbaf3e1fcdf19ac944bf97b4376116f9073fc94f8a50d83c7dc74600fcf1e2_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:14bce82fd9c7b7e0c35142228c89e184fea03134c8a710f8e478cd63af5cbdcc_amd64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:14bce82fd9c7b7e0c35142228c89e184fea03134c8a710f8e478cd63af5cbdcc_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:14bce82fd9c7b7e0c35142228c89e184fea03134c8a710f8e478cd63af5cbdcc_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c6731323059e26a672afbf9ddb08292f97dd79814a6d09bae53ff75bf51924ac_arm64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c6731323059e26a672afbf9ddb08292f97dd79814a6d09bae53ff75bf51924ac_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c6731323059e26a672afbf9ddb08292f97dd79814a6d09bae53ff75bf51924ac_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:136f6df755b01ebc36a1d395b9afa45d3f8100bcdee95e9ead614bb6795348d0_arm64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:136f6df755b01ebc36a1d395b9afa45d3f8100bcdee95e9ead614bb6795348d0_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:136f6df755b01ebc36a1d395b9afa45d3f8100bcdee95e9ead614bb6795348d0_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:7c090185b0d5e89ce52076de7774557581bddb4bbca04763695589cb3bc4c33d_amd64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:7c090185b0d5e89ce52076de7774557581bddb4bbca04763695589cb3bc4c33d_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:7c090185b0d5e89ce52076de7774557581bddb4bbca04763695589cb3bc4c33d_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:1e6e40e659da6f55601d3109f6980550c876ffe780774d5a619e6edf673f80ea_amd64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:1e6e40e659da6f55601d3109f6980550c876ffe780774d5a619e6edf673f80ea_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:1e6e40e659da6f55601d3109f6980550c876ffe780774d5a619e6edf673f80ea_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:65dd5d374df30a567aaf21633b5f3d619a841172c23e92477b26c984bee46d8c_arm64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:65dd5d374df30a567aaf21633b5f3d619a841172c23e92477b26c984bee46d8c_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:65dd5d374df30a567aaf21633b5f3d619a841172c23e92477b26c984bee46d8c_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1f04caa2c54df86a12e5de05d1628a9dca26cfcea9de0e3e80451d61de3c6c07_amd64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1f04caa2c54df86a12e5de05d1628a9dca26cfcea9de0e3e80451d61de3c6c07_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1f04caa2c54df86a12e5de05d1628a9dca26cfcea9de0e3e80451d61de3c6c07_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:8e382cd3bdb92b62eccdcd9e46e58a75debb6b6a75db1faee879b3b430028b70_arm64 as a component of Red Hat Container Native Virtualization 4.14",
"product_id": "Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:8e382cd3bdb92b62eccdcd9e46e58a75debb6b6a75db1faee879b3b430028b70_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:8e382cd3bdb92b62eccdcd9e46e58a75debb6b6a75db1faee879b3b430028b70_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.14"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Sarah Bennert",
"Stoyan Nikolov"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-7374",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-04-22T07:20:25+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:7544ebe278319575f271515132bcb8f38738f69fd67f20264bef291f4ba678c4_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f8b8ced889bfbb090f24612be140cba9c844d5e232078868f21c2834785cd45b_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:66b1038270059c399b70eda7c652e6f235e9229848ffe4a99f9c7e3a01bf4fe5_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9848cf40c43e015e81e577b1b3edc2a8274093ed3f24c84e1a374ef1acfce538_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:60a632f64ad139fd2c1647dc76dfb288232c83ca6c1786c7653d6d5e1dbbd90c_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:69d382de9dd596e18d123809dc5aaaf249ba88444edf38f60770e94a36c3cf31_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:63ddbc45da0474b5543c8ab4d1801f2d89415a9afc5c799f21f517212d43cb96_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:cad2524c9a025cb89647fbabdff7815d89a1a29c4dfb1a5903937efa4283621e_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b409c5d30eb925291af46505647f7ac0c3966d59506fdee1e233cc773a8f9d95_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d4689fa0755d3003dc0b42754641677a161c0f307a496399022412a7dc032496_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e9f2391e096ca68407ca0ff0694e5e96408fb5189f8db0c6353bd3017a13b14c_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:f7dbaf3e1fcdf19ac944bf97b4376116f9073fc94f8a50d83c7dc74600fcf1e2_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:14bce82fd9c7b7e0c35142228c89e184fea03134c8a710f8e478cd63af5cbdcc_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c6731323059e26a672afbf9ddb08292f97dd79814a6d09bae53ff75bf51924ac_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:1e6e40e659da6f55601d3109f6980550c876ffe780774d5a619e6edf673f80ea_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:65dd5d374df30a567aaf21633b5f3d619a841172c23e92477b26c984bee46d8c_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1f04caa2c54df86a12e5de05d1628a9dca26cfcea9de0e3e80451d61de3c6c07_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:8e382cd3bdb92b62eccdcd9e46e58a75debb6b6a75db1faee879b3b430028b70_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2463728"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in KubeVirt\u0027s virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host\u0027s container runtime (CRI-O) socket, an attacker can hijack virt-handler\u0027s privileged connection. This enables the attacker to access any Unix socket on the host, potentially leading to full control of the node and the entire cluster.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important privilege escalation flaw in KubeVirt\u0027s virt-handler component. An authenticated OpenShift user with edit permissions in a single namespace can exploit improper symlink validation to hijack virt-handler\u0027s privileged connection. This allows access to any Unix socket on the host, leading to potential full control of the node and the entire cluster.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:136f6df755b01ebc36a1d395b9afa45d3f8100bcdee95e9ead614bb6795348d0_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:7c090185b0d5e89ce52076de7774557581bddb4bbca04763695589cb3bc4c33d_amd64"
],
"known_not_affected": [
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:7544ebe278319575f271515132bcb8f38738f69fd67f20264bef291f4ba678c4_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f8b8ced889bfbb090f24612be140cba9c844d5e232078868f21c2834785cd45b_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:66b1038270059c399b70eda7c652e6f235e9229848ffe4a99f9c7e3a01bf4fe5_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9848cf40c43e015e81e577b1b3edc2a8274093ed3f24c84e1a374ef1acfce538_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:60a632f64ad139fd2c1647dc76dfb288232c83ca6c1786c7653d6d5e1dbbd90c_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:69d382de9dd596e18d123809dc5aaaf249ba88444edf38f60770e94a36c3cf31_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:63ddbc45da0474b5543c8ab4d1801f2d89415a9afc5c799f21f517212d43cb96_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:cad2524c9a025cb89647fbabdff7815d89a1a29c4dfb1a5903937efa4283621e_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b409c5d30eb925291af46505647f7ac0c3966d59506fdee1e233cc773a8f9d95_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d4689fa0755d3003dc0b42754641677a161c0f307a496399022412a7dc032496_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e9f2391e096ca68407ca0ff0694e5e96408fb5189f8db0c6353bd3017a13b14c_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:f7dbaf3e1fcdf19ac944bf97b4376116f9073fc94f8a50d83c7dc74600fcf1e2_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:14bce82fd9c7b7e0c35142228c89e184fea03134c8a710f8e478cd63af5cbdcc_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c6731323059e26a672afbf9ddb08292f97dd79814a6d09bae53ff75bf51924ac_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:1e6e40e659da6f55601d3109f6980550c876ffe780774d5a619e6edf673f80ea_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:65dd5d374df30a567aaf21633b5f3d619a841172c23e92477b26c984bee46d8c_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1f04caa2c54df86a12e5de05d1628a9dca26cfcea9de0e3e80451d61de3c6c07_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:8e382cd3bdb92b62eccdcd9e46e58a75debb6b6a75db1faee879b3b430028b70_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-7374"
},
{
"category": "external",
"summary": "RHBZ#2463728",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463728"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-7374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7374"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-7374",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7374"
}
],
"release_date": "2026-05-26T12:30:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-26T11:34:22+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:136f6df755b01ebc36a1d395b9afa45d3f8100bcdee95e9ead614bb6795348d0_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:7c090185b0d5e89ce52076de7774557581bddb4bbca04763695589cb3bc4c33d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20890"
},
{
"category": "workaround",
"details": "Update cluster RBAC to not allow exec into virt-launcher pods.",
"product_ids": [
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:7544ebe278319575f271515132bcb8f38738f69fd67f20264bef291f4ba678c4_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f8b8ced889bfbb090f24612be140cba9c844d5e232078868f21c2834785cd45b_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:66b1038270059c399b70eda7c652e6f235e9229848ffe4a99f9c7e3a01bf4fe5_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9848cf40c43e015e81e577b1b3edc2a8274093ed3f24c84e1a374ef1acfce538_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:60a632f64ad139fd2c1647dc76dfb288232c83ca6c1786c7653d6d5e1dbbd90c_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:69d382de9dd596e18d123809dc5aaaf249ba88444edf38f60770e94a36c3cf31_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:63ddbc45da0474b5543c8ab4d1801f2d89415a9afc5c799f21f517212d43cb96_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:cad2524c9a025cb89647fbabdff7815d89a1a29c4dfb1a5903937efa4283621e_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b409c5d30eb925291af46505647f7ac0c3966d59506fdee1e233cc773a8f9d95_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d4689fa0755d3003dc0b42754641677a161c0f307a496399022412a7dc032496_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e9f2391e096ca68407ca0ff0694e5e96408fb5189f8db0c6353bd3017a13b14c_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:f7dbaf3e1fcdf19ac944bf97b4376116f9073fc94f8a50d83c7dc74600fcf1e2_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:14bce82fd9c7b7e0c35142228c89e184fea03134c8a710f8e478cd63af5cbdcc_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c6731323059e26a672afbf9ddb08292f97dd79814a6d09bae53ff75bf51924ac_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:136f6df755b01ebc36a1d395b9afa45d3f8100bcdee95e9ead614bb6795348d0_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:7c090185b0d5e89ce52076de7774557581bddb4bbca04763695589cb3bc4c33d_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:1e6e40e659da6f55601d3109f6980550c876ffe780774d5a619e6edf673f80ea_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:65dd5d374df30a567aaf21633b5f3d619a841172c23e92477b26c984bee46d8c_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1f04caa2c54df86a12e5de05d1628a9dca26cfcea9de0e3e80451d61de3c6c07_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:8e382cd3bdb92b62eccdcd9e46e58a75debb6b6a75db1faee879b3b430028b70_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:7544ebe278319575f271515132bcb8f38738f69fd67f20264bef291f4ba678c4_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f8b8ced889bfbb090f24612be140cba9c844d5e232078868f21c2834785cd45b_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:66b1038270059c399b70eda7c652e6f235e9229848ffe4a99f9c7e3a01bf4fe5_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9848cf40c43e015e81e577b1b3edc2a8274093ed3f24c84e1a374ef1acfce538_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:60a632f64ad139fd2c1647dc76dfb288232c83ca6c1786c7653d6d5e1dbbd90c_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:69d382de9dd596e18d123809dc5aaaf249ba88444edf38f60770e94a36c3cf31_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:63ddbc45da0474b5543c8ab4d1801f2d89415a9afc5c799f21f517212d43cb96_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:cad2524c9a025cb89647fbabdff7815d89a1a29c4dfb1a5903937efa4283621e_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b409c5d30eb925291af46505647f7ac0c3966d59506fdee1e233cc773a8f9d95_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d4689fa0755d3003dc0b42754641677a161c0f307a496399022412a7dc032496_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e9f2391e096ca68407ca0ff0694e5e96408fb5189f8db0c6353bd3017a13b14c_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:f7dbaf3e1fcdf19ac944bf97b4376116f9073fc94f8a50d83c7dc74600fcf1e2_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:14bce82fd9c7b7e0c35142228c89e184fea03134c8a710f8e478cd63af5cbdcc_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c6731323059e26a672afbf9ddb08292f97dd79814a6d09bae53ff75bf51924ac_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:136f6df755b01ebc36a1d395b9afa45d3f8100bcdee95e9ead614bb6795348d0_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:7c090185b0d5e89ce52076de7774557581bddb4bbca04763695589cb3bc4c33d_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:1e6e40e659da6f55601d3109f6980550c876ffe780774d5a619e6edf673f80ea_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:65dd5d374df30a567aaf21633b5f3d619a841172c23e92477b26c984bee46d8c_arm64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1f04caa2c54df86a12e5de05d1628a9dca26cfcea9de0e3e80451d61de3c6c07_amd64",
"Red Hat Container Native Virtualization 4.14:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:8e382cd3bdb92b62eccdcd9e46e58a75debb6b6a75db1faee879b3b430028b70_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…