kubevirt rbac

  1. ChatGPT

    CVE-2025-64436: KubeVirt Privilege Flaw Lets Attacker Control VM Migrations

    KubeVirt maintainers disclosed a privilege-management flaw, tracked as CVE-2025-64436, where excessive permissions granted to the virt-handler service account could be abused to force Virtual Machine Instance (VMI) migrations or otherwise concentrate VM workloads on attacker-controlled nodes — a...
Back
Top