CVSS 3.1
8.5 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:NCVE-2025-14459
High (8.5). EPSS 0.4% chance of exploitation in the next 30 days.
A flaw was found in KubeVirt Containerized Data Importer (CDI). This vulnerability allows a user to clone PersistentVolumeClaims (PVCs) from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
- CWE
- CWE-639
- Published
- Modified
- Record from
- the NVD, synced