---
id: CVE-2026-13318
aliases:
  - GHSA-cgm6-wvp9-4g5h
title: >-
  KubeVirt virt-api port-forward handler vulnerable to SSRF via guest-controlled
  VMI IP address
summary: >-
  KubeVirt virt-api port-forward handler vulnerable to SSRF via guest-controlled
  VMI IP address
severity: medium
cvss: 6.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N'
vendor: kubevirt
product: kubevirt.io/kubevirt
ecosystem: go
affected:
  - kubevirt.io/kubevirt < 1.10.0-rc.0
patched:
  - kubevirt.io/kubevirt 1.10.0-rc.0
published: '2026-06-26'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T17:30:04.834983641Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-cgm6-wvp9-4g5h'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-13318'
  - url: 'https://github.com/kubevirt/kubevirt/pull/18753'
  - url: >-
      https://github.com/kubevirt/kubevirt/commit/0f5fef3309417f454565412f56f571f48358853f
  - url: >-
      https://github.com/kubevirt/kubevirt/commit/df419a0f20aa7ddc9f4512431c3aed9a642ad1e1
  - url: 'https://access.redhat.com/security/cve/CVE-2026-13318'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2492659'
  - url: 'https://github.com/kubevirt/kubevirt'
  - url: 'https://github.com/kubevirt/kubevirt/releases/tag/v1.10.0-rc.0'
tags:
  - osv
  - go
epss: 0.00236
epssPercentile: 0.1472
ingestedAt: '2026-11-04T19:09:49.098Z'
---

## Overview

A server-side request forgery (SSRF) flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance (VMI), virt-api reads the target IP from vmi.Status.Interfaces[0].IP and passes it directly to net.Dial() without validation. For VMIs using non-masquerade network bindings (bridge or secondary-only), this IP is reported by the QEMU guest agent running inside the VM and is fully controllable by the VM owner. An attacker with kubevirt.io:edit permissions can create a VM with a modified guest agent that reports an arbitrary IP address, then request port-forward to establish a bidirectional TCP tunnel from virt-api's cluster-internal network position to any routable destination, bypassing NetworkPolicy isolation.

## Affected packages

- `kubevirt.io/kubevirt < 1.10.0-rc.0`

## Remediation

Upgrade to a patched release:

- `kubevirt.io/kubevirt 1.10.0-rc.0`