TI-2026-14377 CVE-2026-17527 · GHSA-2cmm-29f6-xcpx
Authorization bypass in Red Hat Container Native Virtualization 4.14
Priority LOW 34
In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource.