RHSA-2026:28002
Vulnerability from csaf_redhat - Published: 2026-06-22 15:51 - Updated: 2026-06-22 19:30Summary
Red Hat Security Advisory: OpenShift Virtualization v4.17 Images
Severity
Important
Notes
Topic: Red Hat OpenShift Virtualization release v4.17 is now available with updates to packages and images that fix several bugs and add enhancements.
Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization v4.17 images.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing a symbolic link (symlink) within an exported filesystem Persistent Volume Claim (PVC) that points outside its designated mount root, the attacker can read arbitrary files from the exporter pod's filesystem. This leads to information disclosure, potentially exposing sensitive data.
7.7 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:465fb0dd4e80a07c298eb724dd6a907532c673bed9404cec734cff71cce2100f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:96be5fd7bafba08700136b008bf3a5d9b42a5a2c0a4a858ce118bfa23a42e110_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:87b23db9599f32b4ad310b480be34961f9dc789dc1b2ab3b84f33ee9b8c755f4_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d5362a5b0d676c4b029435c48dda147bc595cfb7c04b197e72f387b1e76093b8_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:0a6c218007ee6bf8deb80b6ca70514c5c1cfeb1ee658880ac1bb334a66d9ba2b_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:aa9870e1e83b7191a9d70fec27c7580066e2eefb3f57033298e882e26475e63a_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:433ce1181f5cd6916ffab0d42154e333161e59c2bb22ff3ae96b063052d7d44b_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:7c804b96fc2d3fabf0cda18f06631e79185d3afbc73f7cfc680346e131d201a5_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:80db67a4857a151351e29477ff98c8339991227cc47a65abc13a607f22821101_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9c17321be56a5cd9aafa1c7db2dcb2b43fe030f81a48c54e310d9238d5b2838e_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:db8340e0cda4ef49a3bca88e42f6c16ad21bf8b14dee5b64ce002c24f29605a5_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:e0b365e19392932887175b44dbde80594d91c2d2e26e753b0308749e4d09e9c6_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:490e1831a424a4adca5bdd4d038ed0ae4cbce6ca90759e097593512f4105bd52_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:e8c66451238fe4b65970f70f8b4b4f13c5f5119cd2427048827f56a752963835_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:0e64036d9c87f2f9b76233079d9248c3a88e6a7394fa46d2a40b775b91028d0e_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:af8f2be5ff98649659b445e38df758a6585bba0501887acc78b099c08436221c_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:298ebf23b781a5fba60e387465583dfca53e69ecfa54b77c124e42300270a370_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:822649c190d4dfa881af63b83fcf1f31756121e9dc60dbdfb026d31760ffa532_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:523d4b8a1dabc163b0c15d01fb3eeee4dbea349dabbfa6dbc85adef07e60b8bf_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a2935f37db0ca5a742e67e89a0f93778868813ba7314423ed389419643378ab4_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4410a5e343def56d199f0f935567924cf92be2ee33129a3fcd03cf3b6e115164_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5c40b4e88f62ab4848f1d6886aa110d97ca65ed5198fcc73a49b5d15fe4d6e76_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:40149384d3c4bbbb4337e28bf5f29596b78cdf653f8d981342acd20cf6091f5e_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:660efe9db7faa8b0b475731db93477ac3b8396cacf5639e5329cce071987f2ea_amd64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96cf658909787b60f52ecbad919832c27a879e492c10f771241916c2dd006de0_arm64 | — | ||
| Unresolved product id: Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:afcd71cdbe98619ffe3355e68d6ccbaf1b022731015122115e05d738a8252c59_amd64 | — |
Threats
Impact
Important
References
8 references
Acknowledgments
VinSOC
Thai Son Dinh, GitHub: @sondt99
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Virtualization release v4.17 is now available with updates to packages and images that fix several bugs and add enhancements.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nThis advisory contains OpenShift Virtualization v4.17 images.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28002",
"url": "https://access.redhat.com/errata/RHSA-2026:28002"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9804",
"url": "https://access.redhat.com/security/cve/CVE-2026-9804"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28002.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Virtualization v4.17 Images",
"tracking": {
"current_release_date": "2026-06-22T19:30:43+00:00",
"generator": {
"date": "2026-06-22T19:30:43+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.0.0"
}
},
"id": "RHSA-2026:28002",
"initial_release_date": "2026-06-22T15:51:40+00:00",
"revision_history": [
{
"date": "2026-06-22T15:51:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-22T15:51:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-22T19:30:43+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Container Native Virtualization 4.17",
"product": {
"name": "Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:container_native_virtualization:4.17::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Container Native Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d5362a5b0d676c4b029435c48dda147bc595cfb7c04b197e72f387b1e76093b8_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d5362a5b0d676c4b029435c48dda147bc595cfb7c04b197e72f387b1e76093b8_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d5362a5b0d676c4b029435c48dda147bc595cfb7c04b197e72f387b1e76093b8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3Ad5362a5b0d676c4b029435c48dda147bc595cfb7c04b197e72f387b1e76093b8?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1781757505"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:0a6c218007ee6bf8deb80b6ca70514c5c1cfeb1ee658880ac1bb334a66d9ba2b_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:0a6c218007ee6bf8deb80b6ca70514c5c1cfeb1ee658880ac1bb334a66d9ba2b_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:0a6c218007ee6bf8deb80b6ca70514c5c1cfeb1ee658880ac1bb334a66d9ba2b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3A0a6c218007ee6bf8deb80b6ca70514c5c1cfeb1ee658880ac1bb334a66d9ba2b?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1781757425"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:7c804b96fc2d3fabf0cda18f06631e79185d3afbc73f7cfc680346e131d201a5_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:7c804b96fc2d3fabf0cda18f06631e79185d3afbc73f7cfc680346e131d201a5_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:7c804b96fc2d3fabf0cda18f06631e79185d3afbc73f7cfc680346e131d201a5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3A7c804b96fc2d3fabf0cda18f06631e79185d3afbc73f7cfc680346e131d201a5?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1781757480"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:80db67a4857a151351e29477ff98c8339991227cc47a65abc13a607f22821101_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:80db67a4857a151351e29477ff98c8339991227cc47a65abc13a607f22821101_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:80db67a4857a151351e29477ff98c8339991227cc47a65abc13a607f22821101_amd64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3A80db67a4857a151351e29477ff98c8339991227cc47a65abc13a607f22821101?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1781757371"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:db8340e0cda4ef49a3bca88e42f6c16ad21bf8b14dee5b64ce002c24f29605a5_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:db8340e0cda4ef49a3bca88e42f6c16ad21bf8b14dee5b64ce002c24f29605a5_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:db8340e0cda4ef49a3bca88e42f6c16ad21bf8b14dee5b64ce002c24f29605a5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/sidecar-shim-rhel9@sha256%3Adb8340e0cda4ef49a3bca88e42f6c16ad21bf8b14dee5b64ce002c24f29605a5?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1781757411"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:e8c66451238fe4b65970f70f8b4b4f13c5f5119cd2427048827f56a752963835_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:e8c66451238fe4b65970f70f8b4b4f13c5f5119cd2427048827f56a752963835_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:e8c66451238fe4b65970f70f8b4b4f13c5f5119cd2427048827f56a752963835_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3Ae8c66451238fe4b65970f70f8b4b4f13c5f5119cd2427048827f56a752963835?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1781757411"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:0e64036d9c87f2f9b76233079d9248c3a88e6a7394fa46d2a40b775b91028d0e_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:0e64036d9c87f2f9b76233079d9248c3a88e6a7394fa46d2a40b775b91028d0e_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:0e64036d9c87f2f9b76233079d9248c3a88e6a7394fa46d2a40b775b91028d0e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3A0e64036d9c87f2f9b76233079d9248c3a88e6a7394fa46d2a40b775b91028d0e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1781757482"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:298ebf23b781a5fba60e387465583dfca53e69ecfa54b77c124e42300270a370_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:298ebf23b781a5fba60e387465583dfca53e69ecfa54b77c124e42300270a370_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:298ebf23b781a5fba60e387465583dfca53e69ecfa54b77c124e42300270a370_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3A298ebf23b781a5fba60e387465583dfca53e69ecfa54b77c124e42300270a370?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1781757440"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:523d4b8a1dabc163b0c15d01fb3eeee4dbea349dabbfa6dbc85adef07e60b8bf_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:523d4b8a1dabc163b0c15d01fb3eeee4dbea349dabbfa6dbc85adef07e60b8bf_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:523d4b8a1dabc163b0c15d01fb3eeee4dbea349dabbfa6dbc85adef07e60b8bf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3A523d4b8a1dabc163b0c15d01fb3eeee4dbea349dabbfa6dbc85adef07e60b8bf?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1781757440"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:465fb0dd4e80a07c298eb724dd6a907532c673bed9404cec734cff71cce2100f_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:465fb0dd4e80a07c298eb724dd6a907532c673bed9404cec734cff71cce2100f_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:465fb0dd4e80a07c298eb724dd6a907532c673bed9404cec734cff71cce2100f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A465fb0dd4e80a07c298eb724dd6a907532c673bed9404cec734cff71cce2100f?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1781757410"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4410a5e343def56d199f0f935567924cf92be2ee33129a3fcd03cf3b6e115164_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4410a5e343def56d199f0f935567924cf92be2ee33129a3fcd03cf3b6e115164_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4410a5e343def56d199f0f935567924cf92be2ee33129a3fcd03cf3b6e115164_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3A4410a5e343def56d199f0f935567924cf92be2ee33129a3fcd03cf3b6e115164?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1781757460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:660efe9db7faa8b0b475731db93477ac3b8396cacf5639e5329cce071987f2ea_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:660efe9db7faa8b0b475731db93477ac3b8396cacf5639e5329cce071987f2ea_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:660efe9db7faa8b0b475731db93477ac3b8396cacf5639e5329cce071987f2ea_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3A660efe9db7faa8b0b475731db93477ac3b8396cacf5639e5329cce071987f2ea?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1781757489"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:afcd71cdbe98619ffe3355e68d6ccbaf1b022731015122115e05d738a8252c59_amd64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:afcd71cdbe98619ffe3355e68d6ccbaf1b022731015122115e05d738a8252c59_amd64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:afcd71cdbe98619ffe3355e68d6ccbaf1b022731015122115e05d738a8252c59_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3Aafcd71cdbe98619ffe3355e68d6ccbaf1b022731015122115e05d738a8252c59?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1781757476"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:87b23db9599f32b4ad310b480be34961f9dc789dc1b2ab3b84f33ee9b8c755f4_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:87b23db9599f32b4ad310b480be34961f9dc789dc1b2ab3b84f33ee9b8c755f4_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:87b23db9599f32b4ad310b480be34961f9dc789dc1b2ab3b84f33ee9b8c755f4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools-rhel9@sha256%3A87b23db9599f32b4ad310b480be34961f9dc789dc1b2ab3b84f33ee9b8c755f4?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9\u0026tag=1781757505"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:aa9870e1e83b7191a9d70fec27c7580066e2eefb3f57033298e882e26475e63a_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:aa9870e1e83b7191a9d70fec27c7580066e2eefb3f57033298e882e26475e63a_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:aa9870e1e83b7191a9d70fec27c7580066e2eefb3f57033298e882e26475e63a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-cni-rhel9@sha256%3Aaa9870e1e83b7191a9d70fec27c7580066e2eefb3f57033298e882e26475e63a?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9\u0026tag=1781757425"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:433ce1181f5cd6916ffab0d42154e333161e59c2bb22ff3ae96b063052d7d44b_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:433ce1181f5cd6916ffab0d42154e333161e59c2bb22ff3ae96b063052d7d44b_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:433ce1181f5cd6916ffab0d42154e333161e59c2bb22ff3ae96b063052d7d44b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/passt-network-binding-plugin-sidecar-rhel9@sha256%3A433ce1181f5cd6916ffab0d42154e333161e59c2bb22ff3ae96b063052d7d44b?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9\u0026tag=1781757480"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9c17321be56a5cd9aafa1c7db2dcb2b43fe030f81a48c54e310d9238d5b2838e_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9c17321be56a5cd9aafa1c7db2dcb2b43fe030f81a48c54e310d9238d5b2838e_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9c17321be56a5cd9aafa1c7db2dcb2b43fe030f81a48c54e310d9238d5b2838e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/pr-helper-rhel9@sha256%3A9c17321be56a5cd9aafa1c7db2dcb2b43fe030f81a48c54e310d9238d5b2838e?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/pr-helper-rhel9\u0026tag=1781757371"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:e0b365e19392932887175b44dbde80594d91c2d2e26e753b0308749e4d09e9c6_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:e0b365e19392932887175b44dbde80594d91c2d2e26e753b0308749e4d09e9c6_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:e0b365e19392932887175b44dbde80594d91c2d2e26e753b0308749e4d09e9c6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/sidecar-shim-rhel9@sha256%3Ae0b365e19392932887175b44dbde80594d91c2d2e26e753b0308749e4d09e9c6?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9\u0026tag=1781757411"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:490e1831a424a4adca5bdd4d038ed0ae4cbce6ca90759e097593512f4105bd52_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:490e1831a424a4adca5bdd4d038ed0ae4cbce6ca90759e097593512f4105bd52_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:490e1831a424a4adca5bdd4d038ed0ae4cbce6ca90759e097593512f4105bd52_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api-rhel9@sha256%3A490e1831a424a4adca5bdd4d038ed0ae4cbce6ca90759e097593512f4105bd52?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api-rhel9\u0026tag=1781757411"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:af8f2be5ff98649659b445e38df758a6585bba0501887acc78b099c08436221c_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:af8f2be5ff98649659b445e38df758a6585bba0501887acc78b099c08436221c_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:af8f2be5ff98649659b445e38df758a6585bba0501887acc78b099c08436221c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server-rhel9@sha256%3Aaf8f2be5ff98649659b445e38df758a6585bba0501887acc78b099c08436221c?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9\u0026tag=1781757482"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:822649c190d4dfa881af63b83fcf1f31756121e9dc60dbdfb026d31760ffa532_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:822649c190d4dfa881af63b83fcf1f31756121e9dc60dbdfb026d31760ffa532_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:822649c190d4dfa881af63b83fcf1f31756121e9dc60dbdfb026d31760ffa532_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller-rhel9@sha256%3A822649c190d4dfa881af63b83fcf1f31756121e9dc60dbdfb026d31760ffa532?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller-rhel9\u0026tag=1781757440"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a2935f37db0ca5a742e67e89a0f93778868813ba7314423ed389419643378ab4_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a2935f37db0ca5a742e67e89a0f93778868813ba7314423ed389419643378ab4_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a2935f37db0ca5a742e67e89a0f93778868813ba7314423ed389419643378ab4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportproxy-rhel9@sha256%3Aa2935f37db0ca5a742e67e89a0f93778868813ba7314423ed389419643378ab4?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9\u0026tag=1781757440"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:96be5fd7bafba08700136b008bf3a5d9b42a5a2c0a4a858ce118bfa23a42e110_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:96be5fd7bafba08700136b008bf3a5d9b42a5a2c0a4a858ce118bfa23a42e110_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:96be5fd7bafba08700136b008bf3a5d9b42a5a2c0a4a858ce118bfa23a42e110_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-exportserver-rhel9@sha256%3A96be5fd7bafba08700136b008bf3a5d9b42a5a2c0a4a858ce118bfa23a42e110?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9\u0026tag=1781757410"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5c40b4e88f62ab4848f1d6886aa110d97ca65ed5198fcc73a49b5d15fe4d6e76_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5c40b4e88f62ab4848f1d6886aa110d97ca65ed5198fcc73a49b5d15fe4d6e76_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5c40b4e88f62ab4848f1d6886aa110d97ca65ed5198fcc73a49b5d15fe4d6e76_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler-rhel9@sha256%3A5c40b4e88f62ab4848f1d6886aa110d97ca65ed5198fcc73a49b5d15fe4d6e76?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler-rhel9\u0026tag=1781757460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:40149384d3c4bbbb4337e28bf5f29596b78cdf653f8d981342acd20cf6091f5e_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:40149384d3c4bbbb4337e28bf5f29596b78cdf653f8d981342acd20cf6091f5e_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:40149384d3c4bbbb4337e28bf5f29596b78cdf653f8d981342acd20cf6091f5e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher-rhel9@sha256%3A40149384d3c4bbbb4337e28bf5f29596b78cdf653f8d981342acd20cf6091f5e?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher-rhel9\u0026tag=1781757489"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96cf658909787b60f52ecbad919832c27a879e492c10f771241916c2dd006de0_arm64",
"product": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96cf658909787b60f52ecbad919832c27a879e492c10f771241916c2dd006de0_arm64",
"product_id": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96cf658909787b60f52ecbad919832c27a879e492c10f771241916c2dd006de0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator-rhel9@sha256%3A96cf658909787b60f52ecbad919832c27a879e492c10f771241916c2dd006de0?arch=arm64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator-rhel9\u0026tag=1781757476"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:87b23db9599f32b4ad310b480be34961f9dc789dc1b2ab3b84f33ee9b8c755f4_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:87b23db9599f32b4ad310b480be34961f9dc789dc1b2ab3b84f33ee9b8c755f4_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:87b23db9599f32b4ad310b480be34961f9dc789dc1b2ab3b84f33ee9b8c755f4_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d5362a5b0d676c4b029435c48dda147bc595cfb7c04b197e72f387b1e76093b8_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d5362a5b0d676c4b029435c48dda147bc595cfb7c04b197e72f387b1e76093b8_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d5362a5b0d676c4b029435c48dda147bc595cfb7c04b197e72f387b1e76093b8_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:0a6c218007ee6bf8deb80b6ca70514c5c1cfeb1ee658880ac1bb334a66d9ba2b_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:0a6c218007ee6bf8deb80b6ca70514c5c1cfeb1ee658880ac1bb334a66d9ba2b_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:0a6c218007ee6bf8deb80b6ca70514c5c1cfeb1ee658880ac1bb334a66d9ba2b_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:aa9870e1e83b7191a9d70fec27c7580066e2eefb3f57033298e882e26475e63a_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:aa9870e1e83b7191a9d70fec27c7580066e2eefb3f57033298e882e26475e63a_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:aa9870e1e83b7191a9d70fec27c7580066e2eefb3f57033298e882e26475e63a_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:433ce1181f5cd6916ffab0d42154e333161e59c2bb22ff3ae96b063052d7d44b_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:433ce1181f5cd6916ffab0d42154e333161e59c2bb22ff3ae96b063052d7d44b_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:433ce1181f5cd6916ffab0d42154e333161e59c2bb22ff3ae96b063052d7d44b_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:7c804b96fc2d3fabf0cda18f06631e79185d3afbc73f7cfc680346e131d201a5_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:7c804b96fc2d3fabf0cda18f06631e79185d3afbc73f7cfc680346e131d201a5_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:7c804b96fc2d3fabf0cda18f06631e79185d3afbc73f7cfc680346e131d201a5_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:80db67a4857a151351e29477ff98c8339991227cc47a65abc13a607f22821101_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:80db67a4857a151351e29477ff98c8339991227cc47a65abc13a607f22821101_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:80db67a4857a151351e29477ff98c8339991227cc47a65abc13a607f22821101_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9c17321be56a5cd9aafa1c7db2dcb2b43fe030f81a48c54e310d9238d5b2838e_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9c17321be56a5cd9aafa1c7db2dcb2b43fe030f81a48c54e310d9238d5b2838e_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9c17321be56a5cd9aafa1c7db2dcb2b43fe030f81a48c54e310d9238d5b2838e_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:db8340e0cda4ef49a3bca88e42f6c16ad21bf8b14dee5b64ce002c24f29605a5_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:db8340e0cda4ef49a3bca88e42f6c16ad21bf8b14dee5b64ce002c24f29605a5_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:db8340e0cda4ef49a3bca88e42f6c16ad21bf8b14dee5b64ce002c24f29605a5_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:e0b365e19392932887175b44dbde80594d91c2d2e26e753b0308749e4d09e9c6_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:e0b365e19392932887175b44dbde80594d91c2d2e26e753b0308749e4d09e9c6_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:e0b365e19392932887175b44dbde80594d91c2d2e26e753b0308749e4d09e9c6_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:490e1831a424a4adca5bdd4d038ed0ae4cbce6ca90759e097593512f4105bd52_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:490e1831a424a4adca5bdd4d038ed0ae4cbce6ca90759e097593512f4105bd52_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:490e1831a424a4adca5bdd4d038ed0ae4cbce6ca90759e097593512f4105bd52_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:e8c66451238fe4b65970f70f8b4b4f13c5f5119cd2427048827f56a752963835_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:e8c66451238fe4b65970f70f8b4b4f13c5f5119cd2427048827f56a752963835_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:e8c66451238fe4b65970f70f8b4b4f13c5f5119cd2427048827f56a752963835_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:0e64036d9c87f2f9b76233079d9248c3a88e6a7394fa46d2a40b775b91028d0e_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:0e64036d9c87f2f9b76233079d9248c3a88e6a7394fa46d2a40b775b91028d0e_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:0e64036d9c87f2f9b76233079d9248c3a88e6a7394fa46d2a40b775b91028d0e_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:af8f2be5ff98649659b445e38df758a6585bba0501887acc78b099c08436221c_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:af8f2be5ff98649659b445e38df758a6585bba0501887acc78b099c08436221c_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:af8f2be5ff98649659b445e38df758a6585bba0501887acc78b099c08436221c_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:298ebf23b781a5fba60e387465583dfca53e69ecfa54b77c124e42300270a370_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:298ebf23b781a5fba60e387465583dfca53e69ecfa54b77c124e42300270a370_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:298ebf23b781a5fba60e387465583dfca53e69ecfa54b77c124e42300270a370_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:822649c190d4dfa881af63b83fcf1f31756121e9dc60dbdfb026d31760ffa532_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:822649c190d4dfa881af63b83fcf1f31756121e9dc60dbdfb026d31760ffa532_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:822649c190d4dfa881af63b83fcf1f31756121e9dc60dbdfb026d31760ffa532_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:523d4b8a1dabc163b0c15d01fb3eeee4dbea349dabbfa6dbc85adef07e60b8bf_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:523d4b8a1dabc163b0c15d01fb3eeee4dbea349dabbfa6dbc85adef07e60b8bf_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:523d4b8a1dabc163b0c15d01fb3eeee4dbea349dabbfa6dbc85adef07e60b8bf_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a2935f37db0ca5a742e67e89a0f93778868813ba7314423ed389419643378ab4_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a2935f37db0ca5a742e67e89a0f93778868813ba7314423ed389419643378ab4_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a2935f37db0ca5a742e67e89a0f93778868813ba7314423ed389419643378ab4_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:465fb0dd4e80a07c298eb724dd6a907532c673bed9404cec734cff71cce2100f_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:465fb0dd4e80a07c298eb724dd6a907532c673bed9404cec734cff71cce2100f_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:465fb0dd4e80a07c298eb724dd6a907532c673bed9404cec734cff71cce2100f_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:96be5fd7bafba08700136b008bf3a5d9b42a5a2c0a4a858ce118bfa23a42e110_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:96be5fd7bafba08700136b008bf3a5d9b42a5a2c0a4a858ce118bfa23a42e110_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:96be5fd7bafba08700136b008bf3a5d9b42a5a2c0a4a858ce118bfa23a42e110_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4410a5e343def56d199f0f935567924cf92be2ee33129a3fcd03cf3b6e115164_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4410a5e343def56d199f0f935567924cf92be2ee33129a3fcd03cf3b6e115164_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4410a5e343def56d199f0f935567924cf92be2ee33129a3fcd03cf3b6e115164_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5c40b4e88f62ab4848f1d6886aa110d97ca65ed5198fcc73a49b5d15fe4d6e76_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5c40b4e88f62ab4848f1d6886aa110d97ca65ed5198fcc73a49b5d15fe4d6e76_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5c40b4e88f62ab4848f1d6886aa110d97ca65ed5198fcc73a49b5d15fe4d6e76_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:40149384d3c4bbbb4337e28bf5f29596b78cdf653f8d981342acd20cf6091f5e_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:40149384d3c4bbbb4337e28bf5f29596b78cdf653f8d981342acd20cf6091f5e_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:40149384d3c4bbbb4337e28bf5f29596b78cdf653f8d981342acd20cf6091f5e_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:660efe9db7faa8b0b475731db93477ac3b8396cacf5639e5329cce071987f2ea_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:660efe9db7faa8b0b475731db93477ac3b8396cacf5639e5329cce071987f2ea_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:660efe9db7faa8b0b475731db93477ac3b8396cacf5639e5329cce071987f2ea_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96cf658909787b60f52ecbad919832c27a879e492c10f771241916c2dd006de0_arm64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96cf658909787b60f52ecbad919832c27a879e492c10f771241916c2dd006de0_arm64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96cf658909787b60f52ecbad919832c27a879e492c10f771241916c2dd006de0_arm64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:afcd71cdbe98619ffe3355e68d6ccbaf1b022731015122115e05d738a8252c59_amd64 as a component of Red Hat Container Native Virtualization 4.17",
"product_id": "Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:afcd71cdbe98619ffe3355e68d6ccbaf1b022731015122115e05d738a8252c59_amd64"
},
"product_reference": "registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:afcd71cdbe98619ffe3355e68d6ccbaf1b022731015122115e05d738a8252c59_amd64",
"relates_to_product_reference": "Red Hat Container Native Virtualization 4.17"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Thai Son Dinh, GitHub: @sondt99"
],
"organization": "VinSOC"
}
],
"cve": "CVE-2026-9804",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-05-18T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:87b23db9599f32b4ad310b480be34961f9dc789dc1b2ab3b84f33ee9b8c755f4_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d5362a5b0d676c4b029435c48dda147bc595cfb7c04b197e72f387b1e76093b8_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:0a6c218007ee6bf8deb80b6ca70514c5c1cfeb1ee658880ac1bb334a66d9ba2b_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:aa9870e1e83b7191a9d70fec27c7580066e2eefb3f57033298e882e26475e63a_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:433ce1181f5cd6916ffab0d42154e333161e59c2bb22ff3ae96b063052d7d44b_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:7c804b96fc2d3fabf0cda18f06631e79185d3afbc73f7cfc680346e131d201a5_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:80db67a4857a151351e29477ff98c8339991227cc47a65abc13a607f22821101_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9c17321be56a5cd9aafa1c7db2dcb2b43fe030f81a48c54e310d9238d5b2838e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:db8340e0cda4ef49a3bca88e42f6c16ad21bf8b14dee5b64ce002c24f29605a5_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:e0b365e19392932887175b44dbde80594d91c2d2e26e753b0308749e4d09e9c6_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:490e1831a424a4adca5bdd4d038ed0ae4cbce6ca90759e097593512f4105bd52_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:e8c66451238fe4b65970f70f8b4b4f13c5f5119cd2427048827f56a752963835_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:0e64036d9c87f2f9b76233079d9248c3a88e6a7394fa46d2a40b775b91028d0e_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:af8f2be5ff98649659b445e38df758a6585bba0501887acc78b099c08436221c_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:298ebf23b781a5fba60e387465583dfca53e69ecfa54b77c124e42300270a370_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:822649c190d4dfa881af63b83fcf1f31756121e9dc60dbdfb026d31760ffa532_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:523d4b8a1dabc163b0c15d01fb3eeee4dbea349dabbfa6dbc85adef07e60b8bf_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a2935f37db0ca5a742e67e89a0f93778868813ba7314423ed389419643378ab4_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4410a5e343def56d199f0f935567924cf92be2ee33129a3fcd03cf3b6e115164_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5c40b4e88f62ab4848f1d6886aa110d97ca65ed5198fcc73a49b5d15fe4d6e76_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:40149384d3c4bbbb4337e28bf5f29596b78cdf653f8d981342acd20cf6091f5e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:660efe9db7faa8b0b475731db93477ac3b8396cacf5639e5329cce071987f2ea_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96cf658909787b60f52ecbad919832c27a879e492c10f771241916c2dd006de0_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:afcd71cdbe98619ffe3355e68d6ccbaf1b022731015122115e05d738a8252c59_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482487"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in KubeVirt\u0027s virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing a symbolic link (symlink) within an exported filesystem Persistent Volume Claim (PVC) that points outside its designated mount root, the attacker can read arbitrary files from the exporter pod\u0027s filesystem. This leads to information disclosure, potentially exposing sensitive data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kubevirt: kubevirt: VMExport directory symlink escape enables exporter pod file read",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:465fb0dd4e80a07c298eb724dd6a907532c673bed9404cec734cff71cce2100f_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:96be5fd7bafba08700136b008bf3a5d9b42a5a2c0a4a858ce118bfa23a42e110_arm64"
],
"known_not_affected": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:87b23db9599f32b4ad310b480be34961f9dc789dc1b2ab3b84f33ee9b8c755f4_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d5362a5b0d676c4b029435c48dda147bc595cfb7c04b197e72f387b1e76093b8_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:0a6c218007ee6bf8deb80b6ca70514c5c1cfeb1ee658880ac1bb334a66d9ba2b_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:aa9870e1e83b7191a9d70fec27c7580066e2eefb3f57033298e882e26475e63a_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:433ce1181f5cd6916ffab0d42154e333161e59c2bb22ff3ae96b063052d7d44b_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:7c804b96fc2d3fabf0cda18f06631e79185d3afbc73f7cfc680346e131d201a5_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:80db67a4857a151351e29477ff98c8339991227cc47a65abc13a607f22821101_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9c17321be56a5cd9aafa1c7db2dcb2b43fe030f81a48c54e310d9238d5b2838e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:db8340e0cda4ef49a3bca88e42f6c16ad21bf8b14dee5b64ce002c24f29605a5_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:e0b365e19392932887175b44dbde80594d91c2d2e26e753b0308749e4d09e9c6_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:490e1831a424a4adca5bdd4d038ed0ae4cbce6ca90759e097593512f4105bd52_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:e8c66451238fe4b65970f70f8b4b4f13c5f5119cd2427048827f56a752963835_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:0e64036d9c87f2f9b76233079d9248c3a88e6a7394fa46d2a40b775b91028d0e_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:af8f2be5ff98649659b445e38df758a6585bba0501887acc78b099c08436221c_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:298ebf23b781a5fba60e387465583dfca53e69ecfa54b77c124e42300270a370_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:822649c190d4dfa881af63b83fcf1f31756121e9dc60dbdfb026d31760ffa532_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:523d4b8a1dabc163b0c15d01fb3eeee4dbea349dabbfa6dbc85adef07e60b8bf_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a2935f37db0ca5a742e67e89a0f93778868813ba7314423ed389419643378ab4_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4410a5e343def56d199f0f935567924cf92be2ee33129a3fcd03cf3b6e115164_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5c40b4e88f62ab4848f1d6886aa110d97ca65ed5198fcc73a49b5d15fe4d6e76_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:40149384d3c4bbbb4337e28bf5f29596b78cdf653f8d981342acd20cf6091f5e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:660efe9db7faa8b0b475731db93477ac3b8396cacf5639e5329cce071987f2ea_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96cf658909787b60f52ecbad919832c27a879e492c10f771241916c2dd006de0_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:afcd71cdbe98619ffe3355e68d6ccbaf1b022731015122115e05d738a8252c59_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9804"
},
{
"category": "external",
"summary": "RHBZ#2482487",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482487"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9804",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9804"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9804",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9804"
}
],
"release_date": "2026-05-28T06:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T15:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:465fb0dd4e80a07c298eb724dd6a907532c673bed9404cec734cff71cce2100f_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:96be5fd7bafba08700136b008bf3a5d9b42a5a2c0a4a858ce118bfa23a42e110_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28002"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:87b23db9599f32b4ad310b480be34961f9dc789dc1b2ab3b84f33ee9b8c755f4_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/libguestfs-tools-rhel9@sha256:d5362a5b0d676c4b029435c48dda147bc595cfb7c04b197e72f387b1e76093b8_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:0a6c218007ee6bf8deb80b6ca70514c5c1cfeb1ee658880ac1bb334a66d9ba2b_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-cni-rhel9@sha256:aa9870e1e83b7191a9d70fec27c7580066e2eefb3f57033298e882e26475e63a_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:433ce1181f5cd6916ffab0d42154e333161e59c2bb22ff3ae96b063052d7d44b_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9@sha256:7c804b96fc2d3fabf0cda18f06631e79185d3afbc73f7cfc680346e131d201a5_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:80db67a4857a151351e29477ff98c8339991227cc47a65abc13a607f22821101_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/pr-helper-rhel9@sha256:9c17321be56a5cd9aafa1c7db2dcb2b43fe030f81a48c54e310d9238d5b2838e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:db8340e0cda4ef49a3bca88e42f6c16ad21bf8b14dee5b64ce002c24f29605a5_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/sidecar-shim-rhel9@sha256:e0b365e19392932887175b44dbde80594d91c2d2e26e753b0308749e4d09e9c6_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:490e1831a424a4adca5bdd4d038ed0ae4cbce6ca90759e097593512f4105bd52_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-api-rhel9@sha256:e8c66451238fe4b65970f70f8b4b4f13c5f5119cd2427048827f56a752963835_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:0e64036d9c87f2f9b76233079d9248c3a88e6a7394fa46d2a40b775b91028d0e_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-artifacts-server-rhel9@sha256:af8f2be5ff98649659b445e38df758a6585bba0501887acc78b099c08436221c_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:298ebf23b781a5fba60e387465583dfca53e69ecfa54b77c124e42300270a370_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-controller-rhel9@sha256:822649c190d4dfa881af63b83fcf1f31756121e9dc60dbdfb026d31760ffa532_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:523d4b8a1dabc163b0c15d01fb3eeee4dbea349dabbfa6dbc85adef07e60b8bf_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportproxy-rhel9@sha256:a2935f37db0ca5a742e67e89a0f93778868813ba7314423ed389419643378ab4_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:465fb0dd4e80a07c298eb724dd6a907532c673bed9404cec734cff71cce2100f_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9@sha256:96be5fd7bafba08700136b008bf3a5d9b42a5a2c0a4a858ce118bfa23a42e110_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:4410a5e343def56d199f0f935567924cf92be2ee33129a3fcd03cf3b6e115164_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-handler-rhel9@sha256:5c40b4e88f62ab4848f1d6886aa110d97ca65ed5198fcc73a49b5d15fe4d6e76_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:40149384d3c4bbbb4337e28bf5f29596b78cdf653f8d981342acd20cf6091f5e_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-launcher-rhel9@sha256:660efe9db7faa8b0b475731db93477ac3b8396cacf5639e5329cce071987f2ea_amd64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:96cf658909787b60f52ecbad919832c27a879e492c10f771241916c2dd006de0_arm64",
"Red Hat Container Native Virtualization 4.17:registry.redhat.io/container-native-virtualization/virt-operator-rhel9@sha256:afcd71cdbe98619ffe3355e68d6ccbaf1b022731015122115e05d738a8252c59_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kubevirt: kubevirt: VMExport directory symlink escape enables exporter pod file read"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…