High severity · published Nov 18, 2025
CVE-2025-64324
KubeVirt is a virtual machine management add-on for Kubernetes
7.7
CVSS
0.2%
EPSS
No
On KEV
Description
KubeVirt is a virtual machine management add-on for Kubernetes. The `hostDisk` feature in KubeVirt allows mounting a host file or directory owned by the user with UID 107 into a VM. However, prior to version 1.6.1 and 1.7.0, the implementation of this feature and more specifically the `DiskOrCreate` option (which creates a file if it doesn't exist) has a logic bug that allows an attacker to read and write arbitrary files owned by more privileged users on the host system. Versions 1.6.1 and 1.7.0 fix the issue.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KU
Kubevirt · Kubevirt
before 1.6.1; 1.7.0; 1.7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-64324
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-64324
Patch
https://github.com/kubevirt/kubevirt/commit/00d03e43e3bf03e563136695a4732b65ed42d764
Patch
https://github.com/kubevirt/kubevirt/commit/ff3b69b08b6b9c8d08d23735ca8d82455f790a69
Issue Tracking
https://github.com/kubevirt/kubevirt/pull/15037
Exploit
https://github.com/kubevirt/kubevirt/security/advisories/GHSA-46xp-26xh-hpqh
More from Kubevirt
9.9
CVE-2020-14316
A flaw was found in kubevirt 0.29 and earlier
8.2
CVE-2023-26484
KubeVirt is a virtual machine management add-on for Kubernetes
7.3
CVE-2026-13201
Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption
6.5
CVE-2026-13208
Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body
6.5
CVE-2025-64433
KubeVirt is a virtual machine management add-on for Kubernetes