kubevirt

KubeVirt contains a logic flaw in its hostDisk handling that can allow a VM to cause the node to read or be forced to write arbitrary host files — a high-severity host-file access bug tracked as CVE-2025-64324 and patched in the 1.6.1 and 1.7.0 releases. Background / Overview KubeVirt is an...

KubeVirt maintainers published a security advisory this autumn describing an authentication-bypass in the aggregation-layer handling inside the virt-api component that can let an attacker impersonate the Kubernetes API server and bypass RBAC when a small set of preconditions exist. Background /...

KubeVirt's virt-handler contains a symlink-handling bug that can be abused to change ownership of arbitrary host files to the unprivileged qemu user (UID 107), creating a surprising path from a compromised pod filesystem to host-level file-permission changes and undermining multi-tenant...

When a Certificate Isn’t Enough: Inside CVE-2025-64434, the KubeVirt TLS Identity Spoof On November 2025, a medium-severity vulnerability — tracked as CVE-2025-64434 — was published that exposed a subtle but dangerous weakness in how KubeVirt handled mutual TLS between its components. The short...

A logic flaw in KubeVirt’s virt-controller allows an attacker who can create pods in a target namespace to impersonate the legitimate virt-launcher pod for a running VirtualMachineInstance (VMI), causing the controller to bind lifecycle operations to the attacker-controlled pod and produce...

KubeVirt’s latest vulnerability, tracked as CVE-2025-64433, breaks a core assumption in virtualized Kubernetes environments: that a guest VM cannot read arbitrary files from the node or the container that launched it. The flaw allows a VM to read arbitrary files from its virt-launcher pod by...

Gartner’s warning that VMware could lose roughly a third of its workloads to hyperscalers by 2028 has snapped the industry into high alert, but parsing the numbers, the causes, and the practical options for IT teams shows a market in rapid re‑arrangement rather than an immediate collapse. The...