Start for Free
go

kubevirt.io/kubevirt

View on go registry
33 Total advisories
33 Vulnerabilities
0 Malware

Vulnerabilities

UNKNOWN
Go

GO-2022-1000

KubeVirt vulnerable to arbitrary file read on host
HIGH 7.7
Go

CVE-2026-9804

KubeVirt has a Link Following issue
CRITICAL 9.9
Go

CVE-2026-7374

KubeVirt has a Link Following vulnerability
UNKNOWN
Go

CVE-2026-7374

KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt
UNKNOWN
Go

CVE-2026-9804

KubeVirt has a Link Following issue in kubevirt.io/kubevirt
UNKNOWN
Go

CVE-2026-6383

KubeVirt's authorization mechanism improperly truncates subresource names in kubevirt.io/kubevirt
MEDIUM 5.4
Go

CVE-2026-6383

KubeVirt's authorization mechanism improperly truncates subresource names
MEDIUM 6.4
Go

CVE-2025-14525

KubeVirt Guest Agent DoS via Excessive Network Interface Reports
MEDIUM 6.5
Go

CVE-2024-31420

KubeVirt NULL pointer dereference flaw
UNKNOWN
Go

CVE-2024-31420

KubeVirt NULL pointer dereference flaw in kubevirt.io/kubevirt
UNKNOWN
Go

CVE-2025-64435

KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation in kubevirt.io/kubevirt
MEDIUM 5.3
Go

CVE-2025-64435

KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation
UNKNOWN
Go

CVE-2025-14525

KubeVirt Guest Agent DoS via Excessive Network Interface Reports in kubevirt.io/kubevirt
MEDIUM 5.9
Go

CVE-2024-33394

kubevirt allows a local attacker to execute arbitrary code via a crafted command

UNKNOWN
Go

CVE-2024-33394

kubevirt allows a local attacker to execute arbitrary code via a crafted command in kubevirt.io/kubevirt
MEDIUM 5.3
Go

CVE-2025-64436

KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes
HIGH 7.7
Go

CVE-2025-64324

KubeVirt Vulnerable to Arbitrary Host File Read and Write
MEDIUM 5.0
Go

CVE-2025-64437

KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes
MEDIUM 6.5
Go

CVE-2025-64433

KubeVirt Arbitrary Container File Read

UNKNOWN
Go

CVE-2025-64437

KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes in kubevirt.io/kubevirt
UNKNOWN
Go

CVE-2025-64324

KubeVirt Vulnerable to Arbitrary Host File Read and Write in kubevirt.io/kubevirt
UNKNOWN
Go

CVE-2025-64433

KubeVirt Arbitrary Container File Read in kubevirt.io/kubevirt
UNKNOWN
Go

CVE-2025-64432

KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer in kubevirt.io/kubevirt
UNKNOWN
Go

CVE-2025-64434

KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing in kubevirt.io/kubevirt
MEDIUM 4.7
Go

CVE-2025-64432

KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer

MEDIUM 4.7
Go

CVE-2025-64434

KubeVirt's Improper TLS Certificate Management Handling Allows API Identity Spoofing
UNKNOWN
Go

GHSA-qv98-3369-g364

KubeVirt vulnerable to arbitrary file read on host in kubevirt.io/kubevirt
UNKNOWN
Go

CVE-2020-14316

Privilege Escalation in kubevirt in kubevirt.io/kubevirt
UNKNOWN
Go

CVE-2020-1701

Permissions bypass in KubeVirt in kubevirt.io/kubevirt
CRITICAL 9.9
Go

CVE-2020-14316

Privilege Escalation in kubevirt
MEDIUM 6.5
Go

CVE-2020-1701

Permissions bypass in KubeVirt
HIGH 8.2
Go

CVE-2023-26484

On a compromised node, the virt-handler service account can be used to modify all node specs
MEDIUM 6.5
Go

GHSA-cvx8-ppmc-78hm

Duplicate Advisory: KubeVirt arbitrary host file read from the VM

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes