Back to overview

CVE-2026-7374

CRITICAL
9.9
CVSS 3.1
Description
A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host's container runtime (CRI-O) socket, an attacker can hijack virt-handler's privileged connection. This enables the attacker to access any Unix socket on the host, potentially leading to full control of the node and the entire cluster.

Metadata

CVE ID
CVE-2026-7374
State
PUBLISHED
Assigner
redhat
Reserved
2026-04-29 06:46 UTC
Published
2026-05-26 13:14 UTC
Last updated
2026-07-28 12:04 UTC
Primary CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following…
Vendor / Product
Red Hat / Red Hat Container Native Virtualization 4.12
Sources
cve.org  ·  NVD

Severity & Metrics

9.9 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
SSVC — CISA Coordinator
Exploitation
none
Automatable
no
Tech. Impact
total
Affected products (10)
VendorProductPlatformVersions
Red Hat Red Hat Container Native Virtualization 4.12 — 1779375376 < *
Red Hat Red Hat Container Native Virtualization 4.13 — 1778999881 < *
Red Hat Red Hat Container Native Virtualization 4.14 — 1779321599 < *
Red Hat Red Hat Container Native Virtualization 4.15 — 1778859977 < *
Red Hat Red Hat Container Native Virtualization 4.16 — 1778861274 < *
Red Hat Red Hat Container Native Virtualization 4.17 — 1779174925 < *
Red Hat Red Hat Container Native Virtualization 4.18 — 1778887155 < *
Red Hat Red Hat Container Native Virtualization 4.19 — 1779289071 < *
Red Hat Red Hat Container Native Virtualization 4.20 — 1779288737 < *
Red Hat Red Hat Container Native Virtualization 4.21 — 1779420069 < *
Weakness (CWE)
CWESourceDescription
CWE-59 cna Improper Link Resolution Before File Access ('Link Following')
CWE-59 adp Improper Link Resolution Before File Access ('Link Following')
CVSS scores (2)
ScoreSeverityVersionSourceVector
9.9 CRITICAL 3.1 cna CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
9.9 CRITICAL 3.1 adp CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References (12)
Back to overview