CVE-2026-13218GHSA-q3jc-42cq-33fjGO-2026-6914

KubeVirt virt-handler network cache symlink vulnerability allows arbitrary host file overwrite in kubevirt.io/kubevirt

UnratedPublished 5 Nov 2026 · Updated 6 Nov 2026

01Description

Verified · OSV

02Analysis

AI analysis

Not analysed yet.

Claude analyses new vulnerabilities after each morning's collection, most important first, up to a daily limit. The verified data on this page is complete without it.

03Affected software

1 entry

Affected products and versions
Product	Affected versions	Fixed in	Source
kubevirt.io/kubevirtGo	`all versions`	None listed	OSV

04Weaknesses

Verified

No weakness classification (CWE) has been assigned yet.

05References

6 links

Advisories2

github.com/advisories/GHSA-q3jc-42cq-33fjadvisoryvia OSV(opens in a new tab)
nvd.nist.gov/vuln/detail/CVE-2026-13218advisoryvia OSV(opens in a new tab)

Issue tracking1

bugzilla.redhat.com/show_bug.cgi?id=2492654

KubeVirt virt-handler network cache symlink vulnerability allows arbitrary host file overwrite in kubevirt.io/kubevirt

01Description

02Analysis

03Affected software

04Weaknesses

05References

Advisories2

Issue tracking1

KubeVirt virt-handler network cache symlink vulnerability allows arbitrary host file overwrite in kubevirt.io/kubevirt

01Description

02Analysis

03Affected software

04Weaknesses

05References

Advisories2

Issue tracking1

Other references3

History

Sources

Same product or vendor