Red Hat Security Advisory

RHSA-2026:53763

OpenShift Virtualization v4.20 Images

Released 2026-08-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Container Native Virtualization 4.20 registry.redhat.io/container-native-virtualization/virt-api-rhel9, registry.redhat.io/container-native-virtualization/virt-handler-rhel9, registry.redhat.io/container-native-virtualization/virt-operator-rhel9

TI-2026-25614 CVE-2026-33186 · GHSA-p77j-4mvh-x3m3

MEDIUM 49

gRPC-Go is the Go language implementation of gRPC.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01619 Published 2026-03-20 Partial fix · 1.79.3 CWE-285

TI-2026-11533 CVE-2026-13622 · GHSA-4336-pf6g-hp94

LOW 39

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00202 Published 2026-08-12 Fixed in 1785837722, 1786346596 +9 CWE-22

TI-2026-11209 CVE-2026-13201 · GHSA-rcfc-7m3g-h5xh

LOW 32

A flaw was found in KubeVirt's safepath package used by virt-handler.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00308 Published 2026-06-24 Fixed in 1791522624, 1786346596 +9 CWE-61