CVE-2026-9804

published 2026-05-28

CVE-2026-9804: A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the…

Priority P3 51 high 7.7 CVSS 3.1

AV N AC L PR L UI N S C C H I N A N

A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing a symbolic link (symlink) within an exported filesystem Persistent Volume Claim (PVC) that points outside its designated mount root, the attacker can read arbitrary files from the exporter pod's filesystem. This leads to information disclosure, potentially exposing sensitive data.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
container-native-virtualization	virt-exportserver	—	—
container-native-virtualization	virt-exportserver-rhel9	—	—
kubevirt.io	kubevirt	0 – 1.9.0-beta.0	—

CVSS provenance

nvd v3.1 7.7 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

vendor_redhat 7.7 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-59