Detections
Analytics

SCA: security update for kubevirt.io/kubevirt (GHSA-2r4r-5x78-mvqf)

medium Tenable Cloud Security Plugin ID 435996

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - KubeVirt is a virtual machine management add-on for Kubernetes. In versions before 1.5.3 and 1.6.1, the
 virt-handler does not verify whether the launcher-sock is a symlink or a regular file. This oversight can
 be exploited, for example, to change the ownership of arbitrary files on the host node to the unprivileged
 user with UID 107 (the same user used by virt-launcher) thus, compromising the CIA (Confidentiality,
 Integrity and Availability) of data on the host. To successfully exploit this vulnerability, an attacker
 should be in control of the file system of the virt-launcher pod. This vulnerability is fixed in 1.5.3 and
 1.6.1. (CVE-2025-64437)

See Also

https://github.com/advisories/GHSA-2r4r-5x78-mvqf

Plugin Details

Severity: Medium

ID: 435996

Version: Revision 1.13

Type: Local

Family: SCA Checks

Published: 11/7/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 5.1

Percentile: 96.47

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Low

Base Score: 3.4

Temporal Score: 2.7

Vector: CVSS2#AV:L/AC:H/Au:M/C:P/I:P/A:P

CVSS Score Source: CVE-2025-64437

CVSS v3

Risk Factor: Medium

Base Score: 5

Temporal Score: 4.5

Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/6/2025

Vulnerability Publication Date: 11/6/2025

Reference Information

CVE: CVE-2025-64437

cwe: CWE-59