CVE-2026-7374 Details

A privilege escalation vulnerability has been identified in the virt-handler component of KubeVirt. This issue allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper validation of symlinks when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host's container runtime (CRI-O) socket, an attacker can hijack virt-handler's privileged connection. This exploitation enables access to any Unix socket on the host, potentially leading to full control of the node and the entire cluster.

It is recommended to update cluster RBAC to prevent exec access into virt-launcher pods.