RHSA-2026:20886HighCVSS 9.9

Red Hat Security Advisory: OpenShift Virtualization v4.13 Images

Published
May 26, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-7374 →

📋 Description

CVE-2026-7374 — kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability

🎯 Affected products19

  • Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:4df8ff903ba9d497fa31b868fde60e395c650afaad83abe0d962f9e67e759837_arm64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:b35e9caa43d5be32a669641b6f1b9bb3469470d6fa5031f5d2b7ee76e1f5ad15_amd64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:d4a5efb5a48f189534a22b2d0629fb3b1efa0b4275ecd80d70115aeb5ac4b700_amd64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:f615a636ab94fffe11b2ea630f94e8a03d67d703db64200d34b0f2beb55b243e_arm64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:6f00da8e5170fd7cf2086e4ee276327b3830891f22b57961ae15a4c1b736df18_amd64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:a09ea726150f34343ae6ae7e6c46f1644074bc7e465b22a7b669a2cf3c909ec7_arm64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:300a50d81bd713402abd8c8d49d66f745afd7727c2b5f518a40835dc8d356ccb_arm64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:5b5fd323fe20dced9941f1e94f4d5059912bf0ec8b37be24c14934e16bc2d4b5_amd64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:3666682aaebb95e4a3427c988f66ff4a53ebd46880f0878c38f92efdf7bb61dc_arm64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:5e94348041cce2061b35f5db722bbf7344064b2587059146fda490cfa088949d_amd64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:6760420bed13672373bd657685e5ef58a0afe33083d0f20c5de41d6b660f9055_amd64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:94063473d116562e4b248ca04af3d5fb1ed728414675c75bb57d0af9d80a305b_arm64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:496bb7164546ea472905bc301a8a4ae9194ec0b300ae847c30bb5a775af5d546_amd64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:efceda8b0057ff086bad77398e617d31e2fbe8c051d865eb529fa5573d3ce4ad_arm64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:346f31b1a107133d3a09cc4b5fee2280fab1f7492eb7de06ddd4a28f3736005c_arm64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:494c0b69213b4a3e2a82a4d46bdee65793bb631d9d036d19bdf911be30e59d6f_amd64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:2b01a10d96ddc80027b162b82b5dd5f3244317db32761d9186d9b61640ce75fd_arm64 as a component of Red Hat Container Native Virtualization 4.13
  • registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:e2d08bfdd903a982b5856269690cba90ff61b868fc2f27c931c810bb421d039b_amd64 as a component of Red Hat Container Native Virtualization 4.13

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Update cluster RBAC to not allow exec into virt-launcher pods.

🔗 References (4)