cve 2025 64435

CVE-2025-64435 is a security vulnerability in KubeVirt, an extension that allows running virtual machines within Kubernetes. The flaw resides in the virt-controller component, where a logic error enables an attacker who can create pods in a target namespace to impersonate the legitimate virt-launcher pod for a running VirtualMachineInstance (VMI). This allows the attacker to bind lifecycle operations to their own pod, leading to sustained denial-of-service (DoS) effects. The vulnerability is fixed in KubeVirt version 1.7.0-beta.0. Users of KubeVirt should update to the patched version to mitigate the risk of DoS attacks exploiting CVE-2025-64435.