cve 2025 64435

A logic flaw in KubeVirt’s virt-controller allows an attacker who can create pods in a target namespace to impersonate the legitimate virt-launcher pod for a running VirtualMachineInstance (VMI), causing the controller to bind lifecycle operations to the attacker-controlled pod and produce...