CVSS 3.1
9.9 criticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HCVE-2026-7374
Critical (9.9). EPSS 0.7% chance of exploitation in the next 30 days. Fixed in kubevirt.io/kubevirt 1.6.6, 1.7.4, 1.8.3.
A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host's container runtime (CRI-O) socket, an attacker can hijack virt-handler's privileged connection. This enables the attacker to access any Unix socket on the host, potentially leading to full control of the node and the entire cluster.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
- CWE
- CWE-59
- Published
- Modified
- Record from
- the NVD, synced
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-7jcp-v9w4-wjmg | Go | kubevirt.io/kubevirt | >=1.8.0-alpha.0 <1.8.3 | 1.8.3 |
| GHSA-7jcp-v9w4-wjmg | Go | kubevirt.io/kubevirt | >=1.7.0-alpha.0 <1.7.4 | 1.7.4 |
| GHSA-7jcp-v9w4-wjmg | Go | kubevirt.io/kubevirt | <1.6.6 | 1.6.6 |
| GO-2026-5848 | Go | kubevirt.io/kubevirt | <1.6.6 >=1.7.0-alpha.0 <1.7.4 >=1.8.0-alpha.0 <1.8.3 | 1.6.6, 1.7.4, 1.8.3 |