Incorrect permission assignment in virt-handler
Priority LOW 30CWE-732Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Partial Red Hat: 2 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat.
Summary
A flaw was found in the KubeVirt main virt-handler versions before 0.26.0 regarding the access permissions of virt-handler. An attacker with access to create VMs could attach any secret within their namespace, allowing them to read the contents of that secret.
Why it matters now
EPSS 0.00746 55th percentileScored 2026-11-07
Fix Partial kubevirt.io/kubevirt (Go): 0.26.0Red Hat: 2 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | virt-handler | kubevirt 0.26.0 | — | No fix listed | CNA |
| — | kubevirt.io/kubevirt (Go) | before 0.26.0 | 0.26.0 | Patch available | GHSA-849r-8wvp-4wwg |
- virt-handler Vendor— Affected kubevirt 0.26.0 Fixed in — No fix listed CNA
- kubevirt.io/kubevirt (Go) Vendor— Affected before 0.26.0 Fixed in 0.26.0 Patch available GHSA-849r-8wvp-4wwg
Remediation
- Fix · GHSA-849r-8wvp-4wwg kubevirt.io/kubevirt (Go) Fixed in 0.26.0 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat OpenShift Virtualization 1 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Virtualization 2 | Affected | No fix yet |
Timeline
- 2026-10-02 Threatist record created from CVE-2020-1701
- 2026-10-03 Alias added: GHSA-849r-8wvp-4wwg
References
Advisory 2
More Kubevirt vulnerabilities
- TI-2025-39759 KubeVirt Vulnerable to Arbitrary Host File Read and Write CVSS 4.0HIGH 8.5
- TI-2022-01664 Path Traversal vulnerability in Kubevirt CVSS 3.1HIGH 8.7
- TI-2025-39849 KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes CVSS 4.0MEDIUM 6.9
- TI-2025-39846 KubeVirt Arbitrary Container File Read CVSS 3.1MEDIUM 6.5
- TI-2025-39847 KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing CVSS 3.1MEDIUM 6.3
- TI-2025-39848 KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation CVSS 3.1MEDIUM 5.3
Sources
- CVE-2020-1701 · CVE Program
- CVE-2020-1701 · NVD
- FIRST EPSS
- GHSA-849r-8wvp-4wwg · GitHub Advisory Database · CC BY 4.0
- CVE-2020-1701 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences