CVE-2026-13201Published
Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-13201 · Microsoft / collected KEV context
cve-program · CVE-2026-13201
- https://access.redhat.com/errata/RHSA-2026:51031
- https://access.redhat.com/errata/RHSA-2026:53655
- https://access.redhat.com/errata/RHSA-2026:53671
- https://access.redhat.com/errata/RHSA-2026:53684
- https://access.redhat.com/errata/RHSA-2026:53721
- https://access.redhat.com/errata/RHSA-2026:53728
- https://access.redhat.com/errata/RHSA-2026:53763
- https://access.redhat.com/errata/RHSA-2026:53797
- https://access.redhat.com/errata/RHSA-2026:53826
- https://access.redhat.com/errata/RHSA-2026:53838
- https://access.redhat.com/errata/RHSA-2026:80941
- https://access.redhat.com/security/cve/CVE-2026-13201
- https://bugzilla.redhat.com/show_bug.cgi?id=2492203
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.