GO-2025-4109 KubeVirt Arbitrary Container File Read in kubevirt.io/kubevirt

KubeVirt Arbitrary Container File Read in kubevirt.io/kubevirt...

EUVD-2025-38217

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, a vulnerability was discovered that allows a VM to read arbitrary files from the virt-launcher pod's file system. This issue stems from improper symlink handling when mounting PVC disks into a VM...