{"id":"GO-2025-4110","revision":"a6af8d709cfb41a29224f345b69f9842","records":[{"revision":"a6af8d709cfb41a29224f345b69f9842","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4110","aliases":["CVE-2025-64324","GHSA-46xp-26xh-hpqh"],"title":"KubeVirt Vulnerable to Arbitrary Host File Read and Write in kubevirt.io/kubevirt","description":"KubeVirt Vulnerable to Arbitrary Host File Read and Write in kubevirt.io/kubevirt","state":0,"publishedAt":"2025-11-17T19:11:23+00:00","modifiedAt":"2026-03-25T20:40:12.748914+00:00","affected":[{"ecosystem":"Go","name":"kubevirt.io/kubevirt","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.6.1"},{"kind":"introduced","version":"1.6.2"},{"kind":"fixed","version":"1.7.0-rc.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/kubevirt/kubevirt/security/advisories/GHSA-46xp-26xh-hpqh","https://github.com/kubevirt/kubevirt/commit/00d03e43e3bf03e563136695a4732b65ed42d764","https://github.com/kubevirt/kubevirt/commit/ff3b69b08b6b9c8d08d23735ca8d82455f790a69","https://github.com/kubevirt/kubevirt/pull/15037"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4110","license":"OSV · upstream source license applies","key":"osv:GO-2025-4110","identifiers":["GO-2025-4110","CVE-2025-64324","GHSA-46xp-26xh-hpqh"]},"retained":false,"historicalAffected":[]}],"coverage":[]}