Giriş Ücretsiz başla

CVE-2026-13622

CVSS 8.8 · YüksekNVD: Awaiting Analysis

Açıklama (NVD)

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc/<pid>/root/ paths using net.Dial() without symlink protection. These socket paths reside in qemu-owned directories writable by the virt-launcher user. An attacker with namespace edit and pods/exec permissions can replace a migration proxy socket with a symlink to the host CRI-O socket. Because virt-handler runs as root in the host mount namespace, absolute symlink targets resolve against the host filesystem, and the bidirectional io.Copy proxy relays attacker-controlled bytes to the container runtime, enabling full node compromise.

Yayın: 13.08.2026 · Son değişiklik: 23.10.2026 · Zayıflık: CWE-22

CVSS 3.1 metrikleri

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Saldırı vektörüYerel
KarmaşıklıkDüşük
Gereken yetkiDüşük
Kullanıcı etkileşimiGerekmez
KapsamDeğişir
GizlilikYüksek
BütünlükYüksek
ErişilebilirlikYüksek

Hesaplanan temel puan: 8.8. CVSS hesaplayıcıda incele

Referanslar

Onaylıyor musunuz?