kubevirt.io/kubevirt vulnerabilities
CVEs whose affected-version data names the kubevirt.io/kubevirt package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2025-64324High· 7.7KubeVirt Vulnerable to Arbitrary Host File Read and Write
KubeVirt Vulnerable to Arbitrary Host File Read and Write
▾ Twilightkubevirt · kubevirt.io/kubevirtEPSS 0.22%via OSV
CVE-2025-64436Medium· 5.3KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes
KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes
▾ Sunlitkubevirt · kubevirt.io/kubevirtEPSS 0.26%via OSV
CVE-2025-64437Medium· 5.0KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes
KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes
▾ Sunlitkubevirt · kubevirt.io/kubevirtEPSS 0.21%via OSV
CVE-2024-33394Medium· 5.9kubevirt allows a local attacker to execute arbitrary code via a crafted command
kubevirt allows a local attacker to execute arbitrary code via a crafted command
▾ Sunlitkubevirt · kubevirt.io/kubevirtEPSS 0.33%via OSV
GHSA-qv98-3369-g364HighKubeVirt vulnerable to arbitrary file read on host
KubeVirt vulnerable to arbitrary file read on host
▾ Twilightkubevirt · kubevirt.io/kubevirtvia OSV