Red Hat Red Hat Container Native Virtualization 4.18
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-13622 | | Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host | HIGH 8.8 | 0.2 % | ||
| CVE-2026-17527 | fixed in 1787586357 | Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing… | HIGH 7.7 | 0.6 % | ||
| CVE-2026-13201 | | Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disr… | HIGH 7.3 | 0.3 % | ||
| CVE-2026-9804 | fixed in 1781928221 | Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read | HIGH 7.7 | 0.5 % | ||
| CVE-2026-7374 | | Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability | CRITICAL 9.9 | 0.7 % |