High · published November 19, 2025
⚡ A sneaky logic bug in KubeVirt's `hostDisk` feature could let attackers read and write files owned by more privileged users! 🔥 Think of it like a restaurant kitchen where a food delivery person mistakenly gets access to the head chef's secret recipe book. Suddenly, they can not only read the recipes but also add their own twists to them! This vulnerability allows an attacker with access to a VM to manipulate files that belong to more privileged users on the host system. A crafty intruder could wreak havoc, potentially leading to unauthorized information disclosure or even system compromise.
Think of it like a restaurant kitchen where a food delivery person mistakenly gets access to the head chef's secret recipe book. Suddenly, they can not only read the recipes but also add their own twists to them! The issue lies in the `DiskOrCreate` option of KubeVirt, which, prior to versions 1.6.1 and 1.7.0, improperly handles file permissions, enabling unauthorized read/write access to files owned by higher-privileged users on the host.
This vulnerability allows an attacker with access to a VM to manipulate files that belong to more privileged users on the host system. A crafty intruder could wreak havoc, potentially leading to unauthorized information disclosure or even system compromise. To secure your system, upgrade KubeVirt to version 1.6.1 or 1.7.0 or later to patch this vulnerability. Always review your configurations and ensure that permissions are appropriately set for host file access. Don't forget to monitor your systems regularly! You've got this! Follow the steps, and you'll lock it down in a jiffy! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| kubevirt/kubevirt | < 1.6.1 | 1.6.1 |
| kubevirt/kubevirt | all versions | — |
| kubevirt/kubevirt | all versions | — |