PT-2025-45439 · Kubevirt+1 · Kubevirt+1

Published 2025-11-06 · Updated 2026-01-02 · CVE-2025-64436

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions KubeVirt versions prior to 1.5.0

Description KubeVirt, a virtual machine management add-on for Kubernetes, has an issue where permissions granted to the virt-handler service account could be misused. Specifically, the ability to update VMIs and patch nodes could be exploited to force a VMI migration to a node controlled by an attacker. This could allow an attacker to mark all nodes as unschedulable, potentially leading to the migration or creation of privileged pods onto a compromised node.

Recommendations Update to a version of KubeVirt greater than or equal to 1.5.0.

Exploit

Fix

Improper Privilege Management

Incorrect Default Permissions

Weakness Enumeration

CWE-269

CWE-276

Related Identifiers

AZL-69790

AZL-69967

CVE-2025-64436

GHSA-7XGM-5PRM-V5GC

GO-2025-4104

Affected Products

Kubevirt

Kubernetes

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64436.json · Exploit
• https://github.com/kubevirt/kubevirt/security/advisories/GHSA-7xgm-5prm-v5gc · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-4104 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-64436 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64436 · Security Note
• https://osv.dev/vulnerability/AZL-69790 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7xgm-5prm-v5gc · Vendor Advisory
• https://osv.dev/vulnerability/AZL-69967 · Vendor Advisory
• https://github.com/kubevirt/kubevirt · Note
• https://twitter.com/VulmonFeeds/status/1987043726766538868 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1oqv4uj/resumen_diario_de_vulnerabilidades_07112025 · Reddit Post
• https://t.me/CVEtracker/36821 · Telegram Post
• https://t.me/msrcreports/2851 · Telegram Post
• https://t.me/cveNotify/142176 · Telegram Post
• https://reddit.com/r/VulnMatter/comments/1otcofi/resumen_diario_de_vulnerabilidades_10112025 · Reddit Post