The hostdisk tag on WindowsForum.com covers discussions about the KubeVirt hostDisk feature, which allows exposing host files or directories into virtual machines running on Kubernetes. A recent thread highlights CVE-2025-64324, a high-severity logic flaw in hostDisk handling that could let a VM read or write arbitrary host files. This vulnerability was patched in KubeVirt versions 1.6.1 and 1.7.0. The tag is relevant for IT professionals managing virtualized workloads on Kubernetes, particularly those concerned with security, patching, and host-file access controls in KubeVirt environments.
-
KubeVirt contains a logic flaw in its hostDisk handling that can allow a VM to cause the node to read or be forced to write arbitrary host files — a high-severity host-file access bug tracked as CVE-2025-64324 and patched in the 1.6.1 and 1.7.0 releases.
Background / Overview
KubeVirt is an...