Vulnerability GO-2026-6914
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 hours ago
November 05, 2026 at 10:55 PM UTC
KubeVirt virt-handler network cache symlink vulnerability allows arbitrary host file overwrite in kubevirt.io/kubevirt
*
*
Summary
KubeVirt virt-handler network cache symlink vulnerability allows arbitrary host file overwrite in kubevirt.io/kubevirt
Details
KubeVirt virt-handler network cache symlink vulnerability allows arbitrary host file overwrite in kubevirt.io/kubevirt
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
KubeVirt downward metrics virtio-serial server vulnerable to unbounded memory consumption in kubevirt.io/kubevirt
>=1.1.0-alpha.0 GO-2026-6912
>=1.1.0-alpha.0 GO-2026-6912
Unknown
4 months ago
KubeVirt has a Link Following issue in kubevirt.io/kubevirt
* GO-2026-5883
* GO-2026-5883
Unknown
4 months ago
KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt
<1.6.6, >=1.7.0-alpha.0 <1.7.4, >=1.8.0-alpha.0 <1.8.3 GO-2026-5848
<1.6.6, >=1.7.0-alpha.0 <1.7.4, >=1.8.0-alpha.0 <1.8.3 GO-2026-5848
Medium Risk
4 months ago
KubeVirt virt-api port-forward handler vulnerable to SSRF via guest-controlled VMI IP address
<1.10.0-rc.0 GHSA-cgm6-wvp9-4g5h
<1.10.0-rc.0 GHSA-cgm6-wvp9-4g5h
Medium Risk
4 months ago
KubeVirt virt-handler network cache symlink vulnerability allows arbitrary host file overwrite
<=1.10.0-rc.0 GHSA-q3jc-42cq-33fj
<=1.10.0-rc.0 GHSA-q3jc-42cq-33fj
Impacted packages
Timeline
Published
9 hours ago
November 05, 2026 at 10:55 PM UTC
Last Modified
8 hours ago
November 05, 2026 at 11:15 PM UTC