This vulnerability (CVE-2026-13201) affects Red Hat OpenShift Virtualization v4.20 images. It involves issues related to XML external entity processing, path traversal, and race conditions as indicated by the associated CWEs. The Red Hat advisory RHSA-2026:51031 announces the availability of OpenShift Virtualization v4.22 images that include updates addressing several bugs and enhancements, implicitly including this vulnerability. There are no known exploits in the wild. The advisory recommends applying the update after ensuring all prior errata are installed.

The vulnerability is rated high severity, indicating a significant potential impact on affected systems. The associated CWEs suggest risks such as unauthorized file access, information disclosure, or race condition-related issues that could affect the integrity or confidentiality of the virtualization environment. However, no active exploitation has been reported.

Red Hat has released OpenShift Virtualization v4.22 images that address this vulnerability. Users should update to version 4.22 or later after applying all previously released errata relevant to their systems. The vendor advisory provides detailed instructions for applying updates. No additional mitigation actions are specified or required beyond applying the official update.