CVE Explorer
CVE-2025-64433
KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, a vulnerability was discovered that allows a VM to read arbitrary files from the virt-launcher pod's file system. This issue stems from improper symlink handling when mounting PVC disks into a VM. Specifically, if a malicious user has full or partial control over the contents of a PVC, they can create a symbolic link that points to a file within the virt-launcher pod's file system. Since libvirt can treat r
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"product":"kubevirt","vendor":"kubevirt","versions":[{"status":"affected","version":"< 1.5.3"},{"status":"affected","version":">= 1.6.0-alpha.0, < 1.6.1"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:7753b9a7434a2e9fc6780baaa453de5034fc0350deeb2c24d521756dd0398ec4 · sha256:7eb9c15dd3a0ff8e… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:7753b9a7434a2e9fc6780baaa453de5034fc0350deeb2c24d521756dd0398ec4 · sha256:7eb9c15dd3a0ff8e… · /containers/cna/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-22","description":"CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:7753b9a7434a2e9fc6780baaa453de5034fc0350deeb2c24d521756dd0398ec4 · sha256:7eb9c15dd3a0ff8e… · /containers/cna/problemTypes/0/descriptions/0
Source references
4 source assertions{"name":"https://github.com/kubevirt/kubevirt/commit/09eafa068ec01eca0e96ebafeeb9522a878dbf64","tags":["x_refsource_MISC"],"url":"https://github.com/kubevirt/kubevirt/commit/09eafa068ec01eca0e96ebafeeb9522a878dbf64"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:7753b9a7434a2e9fc6780baaa453de5034fc0350deeb2c24d521756dd0398ec4 · sha256:7eb9c15dd3a0ff8e… · /containers/cna/references/1
{"name":"https://github.com/kubevirt/kubevirt/commit/9dc798cb1efe924a9a2b97b6e016452dec5e3849","tags":["x_refsource_MISC"],"url":"https://github.com/kubevirt/kubevirt/commit/9dc798cb1efe924a9a2b97b6e016452dec5e3849"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:7753b9a7434a2e9fc6780baaa453de5034fc0350deeb2c24d521756dd0398ec4 · sha256:7eb9c15dd3a0ff8e… · /containers/cna/references/2
{"name":"https://github.com/kubevirt/kubevirt/commit/a81b27d4600cf654274dd197119658382affdb08","tags":["x_refsource_MISC"],"url":"https://github.com/kubevirt/kubevirt/commit/a81b27d4600cf654274dd197119658382affdb08"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:7753b9a7434a2e9fc6780baaa453de5034fc0350deeb2c24d521756dd0398ec4 · sha256:7eb9c15dd3a0ff8e… · /containers/cna/references/3
{"name":"https://github.com/kubevirt/kubevirt/security/advisories/GHSA-qw6q-3pgr-5cwq","tags":["x_refsource_CONFIRM"],"url":"https://github.com/kubevirt/kubevirt/security/advisories/GHSA-qw6q-3pgr-5cwq"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:7753b9a7434a2e9fc6780baaa453de5034fc0350deeb2c24d521756dd0398ec4 · sha256:7eb9c15dd3a0ff8e… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.