CVE-2026-7374
A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host's container runtime (CRI-O) socket, an attacker can hijack virt-handler's privileged connection. This enables the attacker to access any Unix socket on the host, potentially leading to full control of the node and the entire cluster.
- CVSS 3.1
- 9.9 CRITICAL
- EPSS
- 0.7% (52th percentile)
- Weakness
- CWE-59
- NVD status
- Awaiting Analysis
- Published
- 2026-05-26
Workaround
Update cluster RBAC to not allow exec into virt-launcher pods.
No indexed exploits for CVE-2026-7374 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2026-7374 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.