Red Hat Security Advisory

RHSA-2026:53655

OpenShift Virtualization v4.13 Images

Released 2026-08-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Container Native Virtualization 4.13 registry.redhat.io/container-native-virtualization/virt-exportserver-rhel9, registry.redhat.io/container-native-virtualization/virt-handler-rhel9

TI-2026-27599 CVE-2026-35469 · GHSA-pc3f-x583-g7j2

MEDIUM 45

spdystream is a Go library for multiplexing streams over SPDY connections.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00656 Published 2026-04-16 Partial fix · 0.5.1 CWE-770

TI-2026-11533 CVE-2026-13622 · GHSA-4336-pf6g-hp94

LOW 39

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00202 Published 2026-08-12 Fixed in 1785837722, 1786346596 +9 CWE-22

TI-2026-11209 CVE-2026-13201 · GHSA-rcfc-7m3g-h5xh

LOW 32

A flaw was found in KubeVirt's safepath package used by virt-handler.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00308 Published 2026-06-24 Fixed in 1791522624, 1786346596 +9 CWE-61