The vulnerability exists in KubeVirt's virt-exportserver component used in Red Hat Container Native Virtualization 4.17. It allows an attacker with namespace-level privileges to exploit improper link resolution (CWE-59) via path traversal in the VMExport directory endpoint. By placing a symbolic link inside an exported filesystem Persistent Volume Claim (PVC) that points outside the mount root, the attacker can read arbitrary files from the exporter pod's filesystem, resulting in information disclosure. The vulnerability does not affect integrity or availability. Red Hat advisories mention the issue but do not list any fixes for the affected product versions as of the advisory dates.

Successful exploitation allows an attacker with namespace-level access to read arbitrary files on the exporter pod's filesystem, leading to information disclosure of potentially sensitive data. There is no impact on data integrity or system availability. The vulnerability is rated high severity with a CVSS 3.1 score of 7.7, reflecting network attack vector, low attack complexity, required privileges at the namespace level, no user interaction, and high confidentiality impact.

Red Hat has published security advisories acknowledging the vulnerability but has not released a fix for Red Hat Container Native Virtualization 4.17 or related OpenShift Virtualization versions at this time. Users should monitor Red Hat's official advisories and errata for updates and apply patches once they become available. Until a fix is released, restricting namespace-level access and carefully controlling symbolic link usage in exported Persistent Volume Claims may reduce exposure.