Openshift Virtualization vulnerabilities

1 known vulnerability in Openshift Virtualization from Red Hat. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Red Hat Container Native Virtualization 4.12: UNIX Symbolic Link (Symlink) Following

  CVE-2026-13201Jun 24, 2026Red Hat

  A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. W