RHSA-2026:20890HighCVSS 9.9

Red Hat Security Advisory: OpenShift Virtualization v4.14 Images

Published
May 26, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-7374 →

📋 Description

CVE-2026-7374 — kubevirt: KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability

🎯 Affected products21

  • Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:7544ebe278319575f271515132bcb8f38738f69fd67f20264bef291f4ba678c4_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:f8b8ced889bfbb090f24612be140cba9c844d5e232078868f21c2834785cd45b_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:66b1038270059c399b70eda7c652e6f235e9229848ffe4a99f9c7e3a01bf4fe5_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9848cf40c43e015e81e577b1b3edc2a8274093ed3f24c84e1a374ef1acfce538_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:60a632f64ad139fd2c1647dc76dfb288232c83ca6c1786c7653d6d5e1dbbd90c_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:69d382de9dd596e18d123809dc5aaaf249ba88444edf38f60770e94a36c3cf31_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:63ddbc45da0474b5543c8ab4d1801f2d89415a9afc5c799f21f517212d43cb96_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:cad2524c9a025cb89647fbabdff7815d89a1a29c4dfb1a5903937efa4283621e_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:b409c5d30eb925291af46505647f7ac0c3966d59506fdee1e233cc773a8f9d95_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:d4689fa0755d3003dc0b42754641677a161c0f307a496399022412a7dc032496_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:e9f2391e096ca68407ca0ff0694e5e96408fb5189f8db0c6353bd3017a13b14c_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:f7dbaf3e1fcdf19ac944bf97b4376116f9073fc94f8a50d83c7dc74600fcf1e2_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:14bce82fd9c7b7e0c35142228c89e184fea03134c8a710f8e478cd63af5cbdcc_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:c6731323059e26a672afbf9ddb08292f97dd79814a6d09bae53ff75bf51924ac_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:136f6df755b01ebc36a1d395b9afa45d3f8100bcdee95e9ead614bb6795348d0_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:7c090185b0d5e89ce52076de7774557581bddb4bbca04763695589cb3bc4c33d_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:1e6e40e659da6f55601d3109f6980550c876ffe780774d5a619e6edf673f80ea_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:65dd5d374df30a567aaf21633b5f3d619a841172c23e92477b26c984bee46d8c_arm64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:1f04caa2c54df86a12e5de05d1628a9dca26cfcea9de0e3e80451d61de3c6c07_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:8e382cd3bdb92b62eccdcd9e46e58a75debb6b6a75db1faee879b3b430028b70_arm64 as a component of Red Hat Container Native Virtualization 4.14

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Update cluster RBAC to not allow exec into virt-launcher pods.

🔗 References (4)