Vulnerability GO-2025-4104

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
11 months ago
November 17, 2025 at 07:11 PM UTC
KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes in github.com/kubevirt/kubevirt
v0.0.1-alpha.0 - v1.10.0-rc.0
v0.0.1-alpha.0 - v1.10.0-rc.0

Summary

KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes in github.com/kubevirt/kubevirt

Details

KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes in github.com/kubevirt/kubevirt.

NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.

(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)

The additional affected modules and versions are: github.com/kubevirt/kubevirt before v1.7.0.

Timeline

Published
11 months ago
November 17, 2025 at 07:11 PM UTC
Last Modified
4 months ago
June 20, 2026 at 12:59 AM UTC