https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:10:43 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-373007 EUVD-2026-373007 https://cve.radiocsirt.org/vuln/euvd-2026-373007 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13622 <p>A symlink following vulnerability was found in KubeVirt&#39;s virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc/&lt;pid&gt;/root/ paths using net.Dial() without symlink protection. These socket paths reside in qemu-owned directories writable by the virt-launcher user. An attacker with namespace edit and pods/exec permissions can replace a migration proxy socket with a symlink to the host CRI-O socket. Because virt-handler runs as root in the host mount namespace, absolute symlink targets resolve against the host filesystem, and the bidirectional io.Copy proxy relays attacker-controlled bytes to the container runtime, enabling full node compromise.</p> <p>A symlink following vulnerability was found in KubeVirt&#39;s virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc/&lt;pid&gt;/root/ paths using net.Dial() without symlink protection. These socket paths reside in qemu-owned directories writable by the virt-launcher user. An attacker with namespace edit and pods/exec permissions can replace a migration proxy socket with a symlink to the host CRI-O socket. Because virt-handler runs as root in the host mount namespace, absolute symlink targets resolve against the host filesystem, and the bidirectional io.Copy proxy relays attacker-controlled bytes to the container runtime, enabling full node compromise.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-13622 https://cve.radiocsirt.org/vuln/ghsa-4336-pf6g-hp94 <p>A symlink following vulnerability was found in KubeVirt&#39;s virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc/&lt;pid&gt;/root/ paths using net.Dial() without symlink protection. These socket paths reside in qemu-owned directories writable by the virt-launcher user. An attacker with namespace edit and pods/exec permissions can replace a migration proxy socket with a symlink to the host CRI-O socket. Because virt-handler runs as root in the host mount namespace, absolute symlink targets resolve against the host filesystem, and the bidirectional io.Copy proxy relays attacker-controlled bytes to the container runtime, enabling full node compromise.</p> <p>A symlink following vulnerability was found in KubeVirt&#39;s virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc/&lt;pid&gt;/root/ paths using net.Dial() without symlink protection. These socket paths reside in qemu-owned directories writable by the virt-launcher user. An attacker with namespace edit and pods/exec permissions can replace a migration proxy socket with a symlink to the host CRI-O socket. Because virt-handler runs as root in the host mount namespace, absolute symlink targets resolve against the host filesystem, and the bidirectional io.Copy proxy relays attacker-controlled bytes to the container runtime, enabling full node compromise.</p> https://cve.radiocsirt.org/vuln/ghsa-4336-pf6g-hp94 https://cve.radiocsirt.org/vuln/msrc_cve-2026-13622 msrc_CVE-2026-13622 https://cve.radiocsirt.org/vuln/msrc_cve-2026-13622 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11752-1 <p>kubevirt1.9-container-disk-1.9.0-3.1 on GA media</p> <p>kubevirt1.9-container-disk-1.9.0-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11752-1 https://cve.radiocsirt.org/vuln/rhea-2026:53670 <p>kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host</p> <p>kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host</p> https://cve.radiocsirt.org/vuln/rhea-2026:53670