EUVD-2026-39595
GHSA-cgm6-wvp9-4g5h
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Network vector via Kubernetes API; PR:L for required kubevirt.io:edit RBAC; S:C captures virt-api pivot beyond VMI network segment; C:L/I:L for bidirectional SSRF access to internal services without full compromise.
Primary rating from Vendor (redhat).
CVSS VectorVendor: redhat
Lifecycle Timeline
1DescriptionCVE.org
A server-side request forgery (SSRF) flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance (VMI), virt-api reads the target IP from vmi.Status.Interfaces[0].IP and passes it directly to net.Dial() without validation. For VMIs using non-masquerade network bindings (bridge or secondary-only), this IP is reported by the QEMU guest agent running inside the VM and is fully controllable by the VM owner. An attacker with kubevirt.io:edit permissions can create a VM with a modified guest agent that reports an arbitrary IP address, then request port-forward to establish a bidirectional TCP tunnel from virt-api's cluster-internal network position to any routable destination, bypassing NetworkPolicy isolation.
AnalysisAI
Server-side request forgery in KubeVirt's virt-api port-forward handler allows authenticated Kubernetes users with kubevirt.io:edit permissions to establish arbitrary bidirectional TCP tunnels from virt-api's trusted cluster-internal network position to any routable destination, bypassing NetworkPolicy isolation. The vulnerability arises because virt-api reads the target IP from vmi.Status.Interfaces[0].IP - a value supplied by the QEMU guest agent inside the VM and thus fully controllable by the VM owner when non-masquerade network bindings (bridge or secondary-only) are in use - and passes it directly to net.Dial() without validation. No public exploit or active exploitation has been identified at time of analysis; EPSS data was not available in the provided intelligence.
Technical ContextAI
KubeVirt extends Kubernetes to manage VirtualMachineInstances (VMIs) as first-class resources, with virt-api serving as the API gateway for VM operations including port-forward requests. The root cause (CWE-918, SSRF) is a trust boundary violation in the port-forward handler: virt-api reads vmi.Status.Interfaces[0].IP to determine where to connect, but for non-masquerade bindings (bridge mode or secondary-only networks), this field is populated by the QEMU guest agent process running inside the VM rather than by the Kubernetes CNI. Because the guest agent is software running in user-controlled space, a VM owner can deploy a modified agent that reports any arbitrary IP. The CVSS S:C (Scope Changed) metric correctly reflects that virt-api occupies a privileged cluster-internal network position - with access to internal services, the Kubernetes API, cloud metadata endpoints (e.g. 169.254.169.254), and pods behind NetworkPolicy - that the attacker's VMI would not otherwise be able to reach. Masquerade-mode networking is not affected because the IP is CNI-assigned, not guest-reported.
RemediationAI
No vendor-released patch version is confirmed from available data; consult the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-13318 and Bugzilla at https://bugzilla.redhat.com/show_bug.cgi?id=2492659 for patch availability and exact fix versions as the issue is tracked by Red Hat Security. Until a patch is applied, the most impactful immediate mitigation is to restrict kubevirt.io:edit RBAC permissions exclusively to trusted operators, since exploitation requires this permission level - granting edit rights to semi-trusted or external VM tenants should be avoided. Enforcing strict egress network controls at the host or cloud security group level on nodes running virt-api limits the destinations reachable via SSRF tunnels; blocking access to cloud IMDS ranges (e.g. 169.254.169.254) and sensitive internal CIDR ranges from virt-api's network namespace reduces blast radius with minimal operational trade-off. Migrating affected VMIs to masquerade network binding mode eliminates the vulnerable trust path entirely because the IP is then CNI-assigned rather than guest-reported, though this may require network reconfiguration and could affect guest connectivity depending on workload requirements. If port-forward functionality is not required by any tenants, restricting it via Kubernetes admission controls or API access policies removes the attack surface entirely.
KubeVirt is a virtual machine management add-on for Kubernetes. Rated medium severity (CVSS 6.9), this vulnerability is
A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to confi
A flaw was found in kubevirt 0.29 and earlier. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploi
KubeVirt is a virtual machine management add-on for Kubernetes. Rated high severity (CVSS 8.2), this vulnerability is re
Local privilege boundary bypass in KubeVirt's safepath package lets an attacker who controls a virt-launcher pod trick t
KubeVirt's virt-handler domain notify server allows a compromised virt-launcher process to forge lifecycle events for an
An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command
Symlink-following in KubeVirt's virt-handler permits a container-level attacker to overwrite arbitrary host files and ch
KubeVirt is a virtual machine management add-on for Kubernetes. Rated high severity (CVSS 8.5), this vulnerability is no
KubeVirt is a virtual machine management add-on for Kubernetes. Rated medium severity (CVSS 5.0). Public exploit code av
KubeVirt is a virtual machine management add-on for Kubernetes. Rated medium severity (CVSS 5.3), this vulnerability is
KubeVirt is a virtual machine management add-on for Kubernetes. Rated medium severity (CVSS 4.7). Public exploit code av
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Linux Enterprise High Performance Computing 15 SP7 | Affected |
| SUSE Linux Enterprise Micro 5.3 | Affected |
| SUSE Linux Enterprise Micro 5.4 | Affected |
| SUSE Linux Enterprise Micro 5.5 | Affected |
| SUSE Linux Enterprise Module for Containers 15 SP7 | Affected |
| SUSE Linux Enterprise Server 15 SP7 | Affected |
| SUSE Linux Enterprise Server 16.0 | Affected |
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| SUSE Linux Micro 6.0 | Affected |
| SUSE Linux Micro 6.1 | Affected |
| SUSE Linux Micro 6.2 | Affected |
| openSUSE Leap 16.0 | Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP4 | Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP5 | Affected |
| SUSE Linux Enterprise Module for Containers 15 SP4 | Affected |
| SUSE Linux Enterprise Module for Containers 15 SP5 | Affected |
| SUSE Linux Enterprise Server 15 SP4 | Affected |
| SUSE Linux Enterprise Server 15 SP5 | Affected |
| SUSE Manager Proxy 4.3 | Affected |
| SUSE Manager Retail Branch Server 4.3 | Affected |
| SUSE Manager Server 4.3 | Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Affected |
| openSUSE Leap 15.4 | Affected |
| openSUSE Leap 15.5 | Affected |
| openSUSE Leap Micro 5.3 | Affected |
| openSUSE Leap Micro 5.4 | Affected |
| openSUSE Leap Micro 5.5 | Affected |
| SUSE Linux Micro Extras 6.0 | Affected |
| SUSE Linux Micro Extras 6.1 | Affected |
| SUSE Linux Micro Extras 6.2 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today