CVE-2026-13201

KubeVirt safepath OpenAtNoFollow flaw allows symlink dereferencing via /proc/self/fd when leaf is a symlink, defeating no-follow protection. An attacker with access to a virt-launcher pod could cause virt-handler to apply file ownership or permission changes to an unintended host path. Affected c...

CVE-2026-13201

A flaw was found in KubeVirt's safepath package. The OpenAtNoFollow function uses OPATH|ONOFOLLOW to obtain a file descriptor to a path leaf, but downstream helpers operate via /proc/self/fd/N using link-following syscalls. When the leaf is a symlink, the kernel dereferences it, defeating the...