host isolation

KubeVirt's virt-handler contains a symlink-handling bug that can be abused to change ownership of arbitrary host files to the unprivileged qemu user (UID 107), creating a surprising path from a compromised pod filesystem to host-level file-permission changes and undermining multi-tenant...