Link following in Kubevirt - CVE-2025-64437
Published: November 7, 2025 / Updated: November 7, 2025
Vulnerability identifier: #VU118193
CSH Severity: Low
CVSS v4: 1.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-64437
CWE-ID: CWE-59
Exploitation vector: Local access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a local user to compromise the target system.
The vulnerability exists due to an insecure link following issue when determining the root mount of a virt-launcher pod. A local administrator can create a specially crafted symbolic link to a critical file on the system and overwrite it with privileges of the application.
Affected software
Kubevirt
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
Containers Module
kubevirt-virtctl-debuginfo
kubevirt-virtctl
kubevirt-manifests
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
Containers Module
kubevirt-virtctl-debuginfo
kubevirt-virtctl
kubevirt-manifests
How to mitigate CVE-2025-64437
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
kubevirt-virtctl-debuginfo - update to 1.6.3-150700.3.13.1
kubevirt-virtctl - update to 1.6.3-150700.3.13.1
kubevirt-manifests - update to 1.6.3-150700.3.13.1
kubevirt-virtctl - update to 1.6.3-150700.3.13.1
kubevirt-manifests - update to 1.6.3-150700.3.13.1