CVE-2026-13201

Name of the Vulnerable Software and Affected Versions KubeVirt (affected versions not specified)

Description A flaw exists in the safepath package used by virt-handler. The OpenAtNoFollow() function utilizes O PATH|O NOFOLLOW to obtain a file descriptor for a path leaf; however, subsequent operations resolve the path via /proc/self/fd/N using syscalls that follow links. If the leaf is a symlink, the kernel dereferences it, bypassing the intended protection. An attacker with access to a virt-launcher pod can exploit this to redirect virt-handler IPC socket connections, such as the notify socket for VM domain lifecycle events. This allows the injection of arbitrary domain events, which can lead to incorrect lifecycle actions, corruption of VM state in the Kubernetes API, or a crash, causing a denial of VM management services for all virtual machines on the node. Furthermore, this flaw enables virt-handler to apply file ownership or permission changes to unintended host paths.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.