PT-2025-46146 · Red Hat+1 · Kubevirt+1

Published 2025-11-07 · Updated 2026-02-27 · CVE-2025-64324

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions KubeVirt versions prior to 1.5

Exploit

Fix

Information Disclosure

Incorrect Permission

Weakness Enumeration

CWE-200

CWE-123

CWE-732

Related Identifiers

AZL-70414

AZL-70463

CVE-2025-64324

GHSA-46XP-26XH-HPQH

GO-2025-4110

OPENSUSE-SU-2026:20281-1

SUSE-SU-2025:4330-1

SUSE-SU-2026:20551-1

SUSE-SU-2026:20610-1

Affected Products

Kubevirt

Suse

References · 43

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64324.json · Exploit
• https://github.com/kubevirt/kubevirt/commit/ff3b69b08b6b9c8d08d23735ca8d82455f790a69 · Patch
• https://github.com/kubevirt/kubevirt/security/advisories/GHSA-46xp-26xh-hpqh · Vendor Advisory
• https://github.com/kubevirt/kubevirt/commit/00d03e43e3bf03e563136695a4732b65ed42d764 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4330-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-64324 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-46xp-26xh-hpqh · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20281-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-70414 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20551-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64324 · Security Note
• https://osv.dev/vulnerability/GO-2025-4110 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-70463 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20610-1 · Vendor Advisory
• https://github.com/kubevirt/kubevirt · Note