Red Hat Red Hat Container Native Virtualization 4.18

• CVE-2026-13622 High 8.8 Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host 0.2%
• CVE-2026-17527 High 7.7 Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone 0.6%
• CVE-2026-13201 High 7.3 Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption 0.3%
• CVE-2026-9804 High 7.7 Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read 0.5%
• CVE-2026-7374 Critical 9.9 Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability 0.7%