Threats tagged 'ghsa-2r4r-5x78-mvqf'

A vulnerability in KubeVirt's virt-handler component allows an attacker with control over a virt-launcher pod's filesystem to exploit symlink mishandling and change ownership of arbitrary host files to an unprivileged user (UID 107). This compromises confidentiality, integrity, and availability of host data. The flaw arises because virt-handler does not verify whether the launcher-sock is a symlink, enabling bypass of isolation boundaries. Exploitation requires additional conditions such as control over the virt-launcher pod filesystem and the ability to create unprivileged user namespaces. The issue is fixed in versions 1.5.3 and 1.6.1.