RHSA-2026:20866HighCVSS 9.9

Red Hat Security Advisory: OpenShift Virtualization v4.15 Images

Published
May 26, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-7374 →

📋 Description

CVE-2026-7374 — kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability

🎯 Affected products21

  • Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:69e3be623e1a2a8dd2c601a36e06ac0614760cef133b1041209802766ce84244_amd64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:c21abdaa83c34b79b8ad84927844c1b3d66063e883924aab9104e21153d3f3b1_arm64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:494e7ad93a6750731662684e6057c330f65b9b9d5904bf359e9cb90419c175dd_arm64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:db054ea430cddd12d2a8760a5d7ab2878026891c777f1be6fb682915d4a8539e_amd64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:0b817bd92fed9f13dc995590b33c245a0031f8a7a3fc0cfe868b5174ef6e48ff_amd64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:98c1ab049b34fe94978dbe48c673f6bdc3fd5f3cb7c02479b8e99df26663cadc_arm64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:5883055be1ec5976a064eab6864f777d32676dfee75f514418d124f19c591048_amd64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a7829e988a31412b3dc58bbd9fca49dac9dbb916462809878a630927bd198deb_arm64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:c0a812723505511c50b8c1bfb2eb22633b36ae3129dd0957ae2d3ae3c2498d64_arm64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:ec7da083282a4c9465529139a5cfe29c456e7caff7187ba9f027c936b16528f7_amd64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:9d50595d4a3cf8c53ccc50a6b52a0d325a292f155b494fe0637e5a090d664f5f_arm64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:b5aa3a6bb65703b77755dccbaa01bee659ab75bbfcf521b6d5d5bd79ae274d96_amd64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:8eaa2bb71213b75886fcfd256f94ef0b0df2094dbdd6bce298f895724cc33fcb_amd64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c8eb889b2f8016bad49610a9ef83e6577bdbe389c59824182756b83c95c40ad3_arm64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:150e16ca964b4afd80b41d0ec2f3551e31ed6f18e07aaa91b49c39312a10c799_arm64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:745e83f3037d1720236942e6afc46c2c8bd2e4cd12b1401ae49ef551acfa18fa_amd64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:08f8ece3d5fbfbe9ea25b5d71046db1ec6268d3cc1901f511780bc01479c0fa6_arm64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:636bff27785b58e38b31ca3fa7d07a1a58f8537e9d72600e05a073a1e9131fb0_amd64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:0a78119c30f8ffdf86f23d8e0c544450d19bbfe01029c52e7e4c5a978e0ab441_amd64 as a component of Red Hat Container Native Virtualization 4.15
  • registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:ba29973c2c9343e725fc82d84b44b258c7b95ba78ff84b9fbe3132cdbdf4e34e_arm64 as a component of Red Hat Container Native Virtualization 4.15

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Update cluster RBAC to not allow exec into virt-launcher pods.

🔗 References (4)