CVE-2026-63623: Incorrect Permission Assignment for Critical Resource

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the qemu-img utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents...

PT-2026-69032

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 12.6.0-1.1 Description A flaw exists during storage volume clone or convert operations where newly created volume images are temporarily world-readable. This occurs because the qemu-img utility operates with overly...