ID:12073 - Exploit for Improper privilege management in Kubevirt - CVE-2025-64436

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to excessive role permissions. A remote attacker can mark all nodes as unschedulable, potentially forcing the migration or creation of privileged pods onto a compromised node.

Remediation