GHSA-7jcp-v9w4-wjmg

Source

https://github.com/advisories/GHSA-7jcp-v9w4-wjmg

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-7jcp-v9w4-wjmg/GHSA-7jcp-v9w4-wjmg.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-7jcp-v9w4-wjmg

Aliases

Downstream

CGA (14)

MINI (2)

Published

2026-05-26T15:32:10Z

Modified

2026-07-17T21:09:18Z

Severity

9.9 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator

Summary

KubeVirt has a Link Following vulnerability

Details

A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host's container runtime (CRI-O) socket, an attacker can hijack virt-handler's privileged connection. This enables the attacker to access any Unix socket on the host, potentially leading to full control of the node and the entire cluster.

Database specific

{
    "cwe_ids":  [
        "CWE-59"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-06-30T18:04:03Z",
    "nvd_published_at":  "2026-05-26T14:16:40Z",
    "severity":  "CRITICAL"
}

References

Affected packages

Go / kubevirt.io/kubevirt

Package

Name: kubevirt.io/kubevirt; View open source insights on deps.dev
Purl: pkg:golang/kubevirt.io/kubevirt

Affected ranges

Type: SEMVER
Events: Introduced

1.8.0-alpha.0

Fixed

1.8.3

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-7jcp-v9w4-wjmg/GHSA-7jcp-v9w4-wjmg.json"

Go / kubevirt.io/kubevirt

Package

Name: kubevirt.io/kubevirt; View open source insights on deps.dev
Purl: pkg:golang/kubevirt.io/kubevirt

Affected ranges

Type: SEMVER
Events: Introduced

1.7.0-alpha.0

Fixed

1.7.4

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-7jcp-v9w4-wjmg/GHSA-7jcp-v9w4-wjmg.json"

Go / kubevirt.io/kubevirt

Package

Name: kubevirt.io/kubevirt; View open source insights on deps.dev
Purl: pkg:golang/kubevirt.io/kubevirt

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.6.6

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-7jcp-v9w4-wjmg/GHSA-7jcp-v9w4-wjmg.json"