RHSA-2026:28002HighCVSS 7.7

Red Hat Security Advisory: OpenShift Virtualization v4.17 Images

Published
June 22, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-9804 →

📋 Description

CVE-2026-9804 — kubevirt: kubevirt: VMExport directory symlink escape enables exporter pod file read

🎯 Affected products27

  • Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:87b23db9599f32b4ad310b480be34961f9dc789dc1b2ab3b84f33ee9b8c755f4_arm64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d5362a5b0d676c4b029435c48dda147bc595cfb7c04b197e72f387b1e76093b8_amd64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:0a6c218007ee6bf8deb80b6ca70514c5c1cfeb1ee658880ac1bb334a66d9ba2b_amd64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:aa9870e1e83b7191a9d70fec27c7580066e2eefb3f57033298e882e26475e63a_arm64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:433ce1181f5cd6916ffab0d42154e333161e59c2bb22ff3ae96b063052d7d44b_arm64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:7c804b96fc2d3fabf0cda18f06631e79185d3afbc73f7cfc680346e131d201a5_amd64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:80db67a4857a151351e29477ff98c8339991227cc47a65abc13a607f22821101_amd64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9c17321be56a5cd9aafa1c7db2dcb2b43fe030f81a48c54e310d9238d5b2838e_arm64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:db8340e0cda4ef49a3bca88e42f6c16ad21bf8b14dee5b64ce002c24f29605a5_amd64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:e0b365e19392932887175b44dbde80594d91c2d2e26e753b0308749e4d09e9c6_arm64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:490e1831a424a4adca5bdd4d038ed0ae4cbce6ca90759e097593512f4105bd52_arm64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:e8c66451238fe4b65970f70f8b4b4f13c5f5119cd2427048827f56a752963835_amd64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:0e64036d9c87f2f9b76233079d9248c3a88e6a7394fa46d2a40b775b91028d0e_amd64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:af8f2be5ff98649659b445e38df758a6585bba0501887acc78b099c08436221c_arm64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:298ebf23b781a5fba60e387465583dfca53e69ecfa54b77c124e42300270a370_amd64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:822649c190d4dfa881af63b83fcf1f31756121e9dc60dbdfb026d31760ffa532_arm64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:523d4b8a1dabc163b0c15d01fb3eeee4dbea349dabbfa6dbc85adef07e60b8bf_amd64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a2935f37db0ca5a742e67e89a0f93778868813ba7314423ed389419643378ab4_arm64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:465fb0dd4e80a07c298eb724dd6a907532c673bed9404cec734cff71cce2100f_amd64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:96be5fd7bafba08700136b008bf3a5d9b42a5a2c0a4a858ce118bfa23a42e110_arm64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4410a5e343def56d199f0f935567924cf92be2ee33129a3fcd03cf3b6e115164_amd64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5c40b4e88f62ab4848f1d6886aa110d97ca65ed5198fcc73a49b5d15fe4d6e76_arm64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:40149384d3c4bbbb4337e28bf5f29596b78cdf653f8d981342acd20cf6091f5e_arm64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:660efe9db7faa8b0b475731db93477ac3b8396cacf5639e5329cce071987f2ea_amd64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96cf658909787b60f52ecbad919832c27a879e492c10f771241916c2dd006de0_arm64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:afcd71cdbe98619ffe3355e68d6ccbaf1b022731015122115e05d738a8252c59_amd64 as a component of Red Hat Container Native Virtualization 4.17

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (4)