CVE-2026-13201Published
Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption
cve-program · CVE-2026-13201
Publishedcontainer-native-virtualization/virt-handler
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Container Native Virtualization 4.12",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "container-native-virtualization/virt-handler",
"defaultStatus": "affected",
"versions": [
{
"version": "1791522624",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4.12::el8"
]
}container-native-virtualization/virt-handler-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Container Native Virtualization 4.13",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "container-native-virtualization/virt-handler-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1786346596",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4.13::el9"
]
}container-native-virtualization/virt-handler-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Container Native Virtualization 4.14",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "container-native-virtualization/virt-handler-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1786309624",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4.14::el9"
]
}container-native-virtualization/virt-handler-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Container Native Virtualization 4.15",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "container-native-virtualization/virt-handler-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1786347656",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4.15::el9"
]
}container-native-virtualization/virt-handler-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Container Native Virtualization 4.16",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "container-native-virtualization/virt-handler-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1786030071",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4.16::el9"
]
}container-native-virtualization/virt-handler-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Container Native Virtualization 4.17",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "container-native-virtualization/virt-handler-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1786348529",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4.17::el9"
]
}container-native-virtualization/virt-handler-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Container Native Virtualization 4.18",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "container-native-virtualization/virt-handler-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1786130068",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4.18::el9"
]
}container-native-virtualization/virt-handler-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Container Native Virtualization 4.19",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "container-native-virtualization/virt-handler-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1786334215",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4.19::el9"
]
}container-native-virtualization/virt-handler-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Container Native Virtualization 4.20",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "container-native-virtualization/virt-handler-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1785831334",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4.20::el9"
]
}container-native-virtualization/virt-handler-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Container Native Virtualization 4.21",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "container-native-virtualization/virt-handler-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1785829701",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4.21::el9"
]
}container-native-virtualization/virt-handler-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Container Native Virtualization 4.22",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "container-native-virtualization/virt-handler-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1785140336",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4.22::el9"
]
}Original source record · Cite this exact observation · Complete original publisher JSON