THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-7374 (CRITICAL 9.9) — A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket

[NVD] CVE-2026-7374 (CRITICAL 9.9) — A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket

lownvdPublished 2026-05-26

CVE-2026-7374 CVSS: 9.9 CRITICAL Published: 2026-05-26T14:16:40.717

A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host's container runtime (CRI

Indicators of compromise

CVE-2026-7374cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-7374