{"id":"EUVD-2026-39595","enisaUuid":"79fdfaae-c6a2-38d5-8c6e-8c116b96771a","description":"A server-side request forgery (SSRF) flaw was found in KubeVirt\u0027s virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance (VMI), virt-api reads the target IP from vmi.Status.Interfaces[0].IP and passes it directly to net.Dial() without validation. For VMIs using non-masquerade network bindings (bridge or secondary-only), this IP is reported by the QEMU guest agent running inside the VM and is fully controllable by the VM owner. An attacker with kubevirt.io:edit permissions can create a VM with a modified guest agent that reports an arbitrary IP address, then request port-forward to establish a bidirectional TCP tunnel from virt-api\u0027s cluster-internal network position to any routable destination, bypassing NetworkPolicy isolation.","datePublished":"Jun 25, 2026, 11:23:38 PM","dateUpdated":"Jun 26, 2026, 12:35:31 PM","baseScore":6.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","references":"https://access.redhat.com/security/cve/CVE-2026-13318\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2492659\n","aliases":"CVE-2026-13318\nGHSA-cgm6-wvp9-4g5h\n","assigner":"redhat","epss":0.24,"enisaIdProduct":[],"enisaIdVendor":[],"enisaIdVulnerability":[{"id":"b1a81b33-1d5e-3e6a-afa6-08a7bfede486","vulnerability":{"id":"GHSA-cgm6-wvp9-4g5h","description":"KubeVirt virt-api port-forward handler vulnerable to SSRF via guest-controlled VMI IP address","datePublished":"Jun 26, 2026, 12:32:07 AM","dateUpdated":"Nov 4, 2026, 5:19:24 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-13318\nhttps://github.com/kubevirt/kubevirt/pull/18753\nhttps://github.com/kubevirt/kubevirt/commit/0f5fef3309417f454565412f56f571f48358853f\nhttps://github.com/kubevirt/kubevirt/commit/df419a0f20aa7ddc9f4512431c3aed9a642ad1e1\nhttps://access.redhat.com/security/cve/CVE-2026-13318\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2492659\nhttps://github.com/kubevirt/kubevirt\nhttps://github.com/kubevirt/kubevirt/releases/tag/v1.10.0-rc.0\n","enisa_id":"EUVD-2026-39595\n","aliases":"GHSA-cgm6-wvp9-4g5h\nCVE-2026-13318\n","epss":0.0,"dataProcessed":"Nov 6, 2026, 9:01:31 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"f1bdeb99-a085-32f4-b7ca-330baceae48e","vulnerability":{"id":"CVE-2026-13318","description":"A server-side request forgery (SSRF) flaw was found in KubeVirt\u0027s virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance (VMI), virt-api reads the target IP from vmi.Status.Interfaces[0].IP and passes it directly to net.Dial() without validation. For VMIs using non-masquerade network bindings (bridge or secondary-only), this IP is reported by the QEMU guest agent running inside the VM and is fully controllable by the VM owner. An attacker with kubevirt.io:edit permissions can create a VM with a modified guest agent that reports an arbitrary IP address, then request port-forward to establish a bidirectional TCP tunnel from virt-api\u0027s cluster-internal network position to any routable destination, bypassing NetworkPolicy isolation.","datePublished":"Jun 25, 2026, 11:23:38 PM","dateUpdated":"Jun 26, 2026, 12:35:31 PM","status":"PUBLISHED","baseScore":6.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","references":"https://access.redhat.com/security/cve/CVE-2026-13318\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2492659\n","enisa_id":"EUVD-2026-39595\n","assigner":"redhat","epss":0.24,"dataProcessed":"Nov 6, 2026, 7:20:27 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"a4d8b47b-c17f-3a46-8009-b31cd85e0666","advisory":{"id":"msrc_CVE-2026-13318","description":"Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip","datePublished":"Jul 1, 2026, 1:02:46 AM","dateUpdated":"Oct 31, 2026, 1:02:43 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-13318.json\n","aliases":"CVE-2026-13318\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"001e62f9-1c91-30c5-b778-6e523dab47e8","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"2bed4b47-3be7-3681-8f14-fbc318729b78","product":{"name":"azl3 kubevirt-openvmm 0:1.9.0-1.azl3","vendor":{"name":"Microsoft"}}},{"id":"9d801375-366c-3b7a-a4c3-defa6fd8443b","product":{"name":"kubevirt","vendor":{"name":"KubeVirt"}}},{"id":"a12890d8-0fc7-3991-9290-cdf4f8b9bc19","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}}]}}]}