CVE-2026-13622

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Aug 12, 2026
Source updated: Sep 21, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc/<pid>/root/ paths using net.Dial() without symlink protection. These socket paths reside in qemu-owned directories writable by the virt-launcher user. An attacker with namespace edit and pods/exec permissions can replace a migration proxy socket with a symlink to the host CRI-O socket. Because virt-handler runs as root in the host mount namespace, absolute symlink targets resolve against the host filesystem, and the bidirectional io.Copy proxy relays attacker-controlled bytes to the container runtime, enabling full node compromise.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Red Hat Container Native Virtualization 4.12

Vendor: Red Hat
Product: Red Hat Container Native Virtualization 4.12
Platforms: Unknown
Default status: affected
Package: container-native-virtualization/virt-handler
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Container Native Virtualization 4.12 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1785837722	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Container Native Virtualization 4.13

Vendor: Red Hat
Product: Red Hat Container Native Virtualization 4.13
Platforms: Unknown
Default status: affected
Package: container-native-virtualization/virt-handler-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Container Native Virtualization 4.13 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1786346596	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Container Native Virtualization 4.14

Vendor: Red Hat
Product: Red Hat Container Native Virtualization 4.14
Platforms: Unknown
Default status: affected
Package: container-native-virtualization/virt-handler-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Container Native Virtualization 4.14 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1786309624	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Container Native Virtualization 4.15

Vendor: Red Hat
Product: Red Hat Container Native Virtualization 4.15
Platforms: Unknown
Default status: affected
Package: container-native-virtualization/virt-handler-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Container Native Virtualization 4.15 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1786347656	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Container Native Virtualization 4.16

Vendor: Red Hat
Product: Red Hat Container Native Virtualization 4.16
Platforms: Unknown
Default status: affected
Package: container-native-virtualization/virt-handler-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Container Native Virtualization 4.16 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1786030071	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Container Native Virtualization 4.17

Vendor: Red Hat
Product: Red Hat Container Native Virtualization 4.17
Platforms: Unknown
Default status: affected
Package: container-native-virtualization/virt-handler-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Container Native Virtualization 4.17 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1786348529	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Container Native Virtualization 4.18

Vendor: Red Hat
Product: Red Hat Container Native Virtualization 4.18
Platforms: Unknown
Default status: affected
Package: container-native-virtualization/virt-handler-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Container Native Virtualization 4.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1786130068	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Container Native Virtualization 4.19

Vendor: Red Hat
Product: Red Hat Container Native Virtualization 4.19
Platforms: Unknown
Default status: affected
Package: container-native-virtualization/virt-handler-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Container Native Virtualization 4.19 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1786334215	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Container Native Virtualization 4.20

Vendor: Red Hat
Product: Red Hat Container Native Virtualization 4.20
Platforms: Unknown
Default status: affected
Package: container-native-virtualization/virt-handler-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Container Native Virtualization 4.20 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1785831334	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Container Native Virtualization 4.21

Vendor: Red Hat
Product: Red Hat Container Native Virtualization 4.21
Platforms: Unknown
Default status: affected
Package: container-native-virtualization/virt-handler-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Container Native Virtualization 4.21 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1785829701	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Container Native Virtualization 4.22

Vendor: Red Hat
Product: Red Hat Container Native Virtualization 4.22
Platforms: Unknown
Default status: affected
Package: container-native-virtualization/virt-handler-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Container Native Virtualization 4.22 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1785140336	`unaffected`	rpm	*	Unavailable	None listed