CVE-2026-13622 is a path traversal vulnerability (CWE-22) in Red Hat Container Native Virtualization 4.12 images used in OpenShift Virtualization. This flaw allows improper limitation of pathname access, which could be exploited to access or modify files outside the intended restricted directories. The vulnerability affects versions >=4.12 and <4.13. The CVSS 3.1 score is 8.8 (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), indicating a local attack vector with low complexity and privileges required, no user interaction, and a scope change with high impact on confidentiality, integrity, and availability. Vendor advisories confirm the vulnerability but do not list any fixes or patches as of the latest updates. No known exploits have been reported in the wild.

The vulnerability allows an attacker with local privileges to perform path traversal attacks, potentially leading to unauthorized disclosure, modification, or destruction of data within the affected Red Hat Container Native Virtualization environment. The high CVSS score reflects the critical impact on confidentiality, integrity, and availability if exploited. However, exploitation requires local access and low privileges, and no active exploitation has been reported.

As of the latest vendor advisories, no fixes or patches are available for this vulnerability. Users should ensure all previously released errata are applied and monitor Red Hat's official advisories for updates. Since this is a local vulnerability, restricting local access and applying general security best practices to limit privilege escalation may reduce risk until a patch is released.