점검 대응높음KEV 미등록
CVE-2026-13201
Red Hat Red Hat OpenShift Virtualization 4, kubevirt, openshift virtualization 취약점
A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. When the leaf is a symlink, the kernel dereferences it, defeating the intended no-follow protection. An attacker with access to a virt-launcher pod can exploit this to redirect virt-handler's IPC socket connections, including the notify socket used for VM domain lifecycle events. By hijacking this socket, the attacker can inject arbitra...
- 대응 우선순위
- 점검
- CVSS
- 7.3
- EPSS
- 0.12% 백분위 2.37% · 2026.08.01 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.06.25