What’s Vulnerable › Products

Red Hat Container Native Virtualization 4.20 vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Red Hat Container Native Virtualization 4.20 version is affected

Latest Red Hat Container Native Virtualization 4.20 vulnerabilities

• CVE-2026-13622 — Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host (CVSS 8.8)
• CVE-2026-17527 — Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone (CVSS 7.7)
• CVE-2026-9804 — Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read (CVSS 7.7)
• CVE-2026-7374 — Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability (CVSS 9.9)