Skip to content
VulniPulse
Sign in
Critical9.9Vendor: HighRed Hat Linux

Critical [CVE-2026-7374] KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability

This critical-severity Red Hat Linux advisory covers CVE-2026-7374 affecting Red Hat Container Native Virtualization 4.12, Red Hat Container Native Virtualization 4.13, Red Hat Container Native Virtualization 4.14.

CVE-2026-7374 Published May 26, 2026
CVE-2026-7374
Affected products & platforms
Red Hat LinuxUnclassified
Open vendor advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

KubeVirt virt-handler: Privilege escalation and node compromise via symlink following vulnerability. Red Hat rates this important (CVSS 9.9).

Weakness: CWE-59.

Affected package(s): container-native-virtualization/virt-handler:1779375376, container-native-virtualization/virt-handler-rhel9:1779288737, container-native-virtualization/virt-handler-rhel9:1779174925, container-native-virtualization/virt-handler-rhel9:1779289071, container-native-virtualization/virt-handler-rhel9:1779420069, container-native-virtualization/virt-handler-rhel9:1778859977.

Resolved in Red Hat advisory RHSA-2026:20866 — update the affected packages (`sudo dnf update`).

Affected products named by the advisory: Red Hat Container Native Virtualization 4.12; Red Hat Container Native Virtualization 4.13; Red Hat Container Native Virtualization 4.14; Red Hat Container Native Virtualization 4.15; and 6 more.

Affected versions
  • container-native-virtualization/virt-handler:1779375376
  • container-native-virtualization/virt-handler-rhel9:1779288737
  • container-native-virtualization/virt-handler-rhel9:1779174925
  • container-native-virtualization/virt-handler-rhel9:1779289071
  • container-native-virtualization/virt-handler-rhel9:1779420069
  • container-native-virtualization/virt-handler-rhel9:1778859977
  • container-native-virtualization/virt-handler-rhel9:1778861274
  • container-native-virtualization/virt-handler-rhel9:1778999881
  • container-native-virtualization/virt-handler-rhel9:1779321599
  • container-native-virtualization/virt-handler-rhel9:1778887155

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Fixed versions
  • RHSA-2026:20866

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • Update the affected package(s) to the fixed version shipped in RHSA-2026:20866 (`sudo dnf update` / `yum update`).

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.