Threats tagged 'ghsa-rcfc-7m3g-h5xh'

A vulnerability in KubeVirt's safepath package allows an attacker with access to a virt-launcher pod to cause the virt-handler component to apply file ownership or permission changes to unintended host paths. This occurs because the OpenAtNoFollow function uses O_PATH|O_NOFOLLOW flags to obtain a file descriptor without following symlinks, but downstream operations dereference symlinks via /proc/self/fd/N, defeating the no-follow protection.