Skip to content
Threat Feed
Subscribe

Product

KubeVirt

1 brief RSS
high advisory

KubeVirt virt-handler Privilege Escalation via Symlink Injection

A symlink following vulnerability (CVE-2026-13622) in KubeVirt allows an attacker with pod execution permissions to escalate privileges and achieve full node compromise by redirecting migration proxy socket traffic.

KubeVirt kubernetes cloud privilege-escalation container-security
1t 1c