CVE-2025-64324

KubeVirt is a virtual machine management add-on for Kubernetes. The `hostDisk` feature in KubeVirt allows mounting a host file or directory owned by the user with UID 107 into a VM. However, prior to version 1.6.1 and 1.7.0, the implementation of this feature and more specifically the `DiskOrCreate` option (which creates a file if it doesn't exist) has a logic bug that allows an attacker to read and write arbitrary files owned by more privileged users on the host system. Versions 1.6.1 and 1.7.0 fix the issue.

• CWE-200
• CWE-732

• https://github.com/kubevirt/kubevirt/commit/00d03e43e3bf03e563136695a4732b65ed42d764Patch
• https://github.com/kubevirt/kubevirt/commit/ff3b69b08b6b9c8d08d23735ca8d82455f790a69Patch
• https://github.com/kubevirt/kubevirt/pull/15037Issue Tracking
• https://github.com/kubevirt/kubevirt/security/advisories/GHSA-46xp-26xh-hpqhExploit, Vendor Advisory

Published

Nov 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-64319Incorrect Permission Assignment for Critical Resource vulner…5.3
• CVE-2025-6432When Multi-Account Containers was enabled, DNS requests coul…8.6
• CVE-2025-64320Improper Neutralization of Input Used for LLM Prompting vuln…6.5
• CVE-2025-64321Improper Neutralization of Input Used for LLM Prompting vuln…5.3
• CVE-2025-64322Incorrect Permission Assignment for Critical Resource vulner…5.3
• CVE-2025-64323kgateway is a Cloud-Native API and AI Gateway. Versions 2.0.…5.3
• CVE-2025-64325Emby Server is a personal media server. Prior to version 4.8…9
• CVE-2025-64326Weblate is a web based localization tool. In versions 5.14 a…3.5
• CVE-2025-64327ThinkDashboard is a self-hosted bookmark dashboard built wit…5.3
• CVE-2025-64328FreePBX Endpoint Manager is a module for managing telephony …7.2
• CVE-2025-64329containerd is an open-source container runtime. Versions 1.7…5.5
• CVE-2025-6433If a user visited a webpage with an invalid TLS certificate,…9.8