MEDIUM6.4Go
GHSA-25mh-hp8x-cgrv· CVE-2025-14525, GO-2026-4384KubeVirt Guest Agent DoS via Excessive Network Interface Reports
Modified: 9/10/2026
package
Go/kubevirt.io/kubevirt
pkg:go/kubevirt.io/kubevirt
MEDIUM5.0Go
GHSA-2r4r-5x78-mvqf· CVE-2025-64437, GO-2025-4102KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes
Modified: 9/10/2026
MEDIUM4.7Go
GHSA-38jw-g2qx-4286· CVE-2025-64432, GO-2025-4103KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer
Modified: 9/10/2026
HIGH7.7Go
GHSA-46xp-26xh-hpqh· CVE-2025-64324, GO-2025-4110KubeVirt Vulnerable to Arbitrary Host File Read and Write
Modified: 9/10/2026
MEDIUM5.9Go
GHSA-4q63-mr2m-57hf· CVE-2024-33394, GO-2024-2816kubevirt allows a local attacker to execute arbitrary code via a crafted command
Modified: 9/10/2026
CRITICAL9.9Go
GHSA-7jcp-v9w4-wjmg· CVE-2026-7374, GO-2026-5848KubeVirt has a Link Following vulnerability
Modified: 9/10/2026
MEDIUM5.3Go
GHSA-7xgm-5prm-v5gc· CVE-2025-64436, GO-2025-4104KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes
Modified: 9/10/2026
CRITICAL9.9Go
GHSA-828r-r2c8-rfw3· CVE-2020-14316, GO-2024-2756Privilege Escalation in kubevirt
Modified: 6/4/2024
MEDIUM6.5Go
GHSA-849r-8wvp-4wwg· CVE-2020-1701, GO-2024-2765Permissions bypass in KubeVirt
Modified: 6/4/2024
MEDIUM5.3Go
GHSA-9m94-w2vq-hcf9· CVE-2025-64435, GO-2025-4105KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation
Modified: 9/10/2026
HIGH8.2Go
GHSA-cp96-jpmq-xrr2· CVE-2023-26484On a compromised node, the virt-handler service account can be used to modify all node specs
Modified: 11/8/2023
MEDIUM4.7Go
GHSA-ggp9-c99x-54gp· CVE-2025-64434, GO-2025-4107KubeVirt's Improper TLS Certificate Management Handling Allows API Identity Spoofing
Modified: 9/10/2026
MEDIUM5.4Go
GHSA-j6cv-3w8p-vrg8· CVE-2026-6383, GO-2026-5450KubeVirt's authorization mechanism improperly truncates subresource names
Modified: 9/10/2026
HIGH7.7Go
GHSA-mpmf-3w4r-qfpf· CVE-2026-9804, GO-2026-5883KubeVirt has a Link Following issue
Modified: 9/10/2026
HIGHGo
GHSA-qv98-3369-g364· CVE-2022-1798, GO-2022-1000KubeVirt vulnerable to arbitrary file read on host
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-qw6q-3pgr-5cwq· CVE-2025-64433, GO-2025-4109KubeVirt Arbitrary Container File Read
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-vjhf-6xfr-5p9g· CVE-2024-31420, GO-2024-2688KubeVirt NULL pointer dereference flaw
Modified: 9/10/2026
—Go
GO-2022-1000· GHSA-qv98-3369-g364KubeVirt vulnerable to arbitrary file read on host in kubevirt.io/kubevirt
Modified: 3/13/2026
—Go
GO-2024-2688· CVE-2024-31420, GHSA-vjhf-6xfr-5p9gKubeVirt NULL pointer dereference flaw in kubevirt.io/kubevirt
Modified: 6/20/2026
—Go
GO-2024-2756· CVE-2020-14316, GHSA-828r-r2c8-rfw3Privilege Escalation in kubevirt in kubevirt.io/kubevirt
Modified: 3/3/2026
—Go
GO-2024-2765· CVE-2020-1701, GHSA-849r-8wvp-4wwgPermissions bypass in KubeVirt in kubevirt.io/kubevirt
Modified: 3/3/2026
—Go
GO-2024-2816· CVE-2024-33394, GHSA-4q63-mr2m-57hfkubevirt allows a local attacker to execute arbitrary code via a crafted command in kubevirt.io/kubevirt
Modified: 6/20/2026
—Go
GO-2025-4102· CVE-2025-64437, GHSA-2r4r-5x78-mvqfKubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes in kubevirt.io/kubevirt
Modified: 3/25/2026
—Go
GO-2025-4103· CVE-2025-64432, GHSA-38jw-g2qx-4286KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer in kubevirt.io/kubevirt
Modified: 3/25/2026
—Go
GO-2025-4105· CVE-2025-64435, GHSA-9m94-w2vq-hcf9KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation in kubevirt.io/kubevirt
Modified: 6/20/2026
—Go
GO-2025-4107· CVE-2025-64434, GHSA-ggp9-c99x-54gpKubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing in kubevirt.io/kubevirt
Modified: 3/25/2026
—Go
GO-2025-4109· CVE-2025-64433, GHSA-qw6q-3pgr-5cwqKubeVirt Arbitrary Container File Read in kubevirt.io/kubevirt
Modified: 3/25/2026
—Go
GO-2025-4110· CVE-2025-64324, GHSA-46xp-26xh-hpqhKubeVirt Vulnerable to Arbitrary Host File Read and Write in kubevirt.io/kubevirt
Modified: 3/25/2026
—Go
GO-2026-4384· CVE-2025-14525, GHSA-25mh-hp8x-cgrvKubeVirt Guest Agent DoS via Excessive Network Interface Reports in kubevirt.io/kubevirt
Modified: 6/20/2026
—Go
GO-2026-5450· CVE-2026-6383, GHSA-j6cv-3w8p-vrg8KubeVirt's authorization mechanism improperly truncates subresource names in kubevirt.io/kubevirt
Modified: 6/26/2026
—Go
GO-2026-5848· CVE-2026-7374, GHSA-7jcp-v9w4-wjmgKubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt
Modified: 7/7/2026
—Go
GO-2026-5883· CVE-2026-9804, GHSA-mpmf-3w4r-qfpfKubeVirt has a Link Following issue in kubevirt.io/kubevirt
Modified: 7/7/2026