CVE-2026-13322Low· 3.8▾ SunlitKubeVirt downward metrics virtio-serial server vulnerable to unbounded memory consumption
▾ Sunlit zone — Low / medium · no exploitation signal
impact 20.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.1%
A flaw was found in KubeVirt's downward metrics virtio-serial server. The server reads guest requests using textproto.Reader.ReadLine(), which buffers input indefinitely until a newline character is received, with no length limit or read deadline. A user with access to a VM guest that has the downward metrics virtio-serial device configured can write a continuous byte stream to the device, causing unbounded memory allocation in the virt-handler process until it is OOM-killed.
github.com/kubevirt/kubevirt >= 1.1.0-alpha.0, <= 1.10.0-rc.0Refer to the advisory for the patched release.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-13318Medium· 6.4KubeVirt virt-api port-forward handler vulnerable to SSRF via guest-controlled VMI IP address
CVE-2026-13218Medium· 4.2KubeVirt virt-handler network cache symlink vulnerability allows arbitrary host file overwrite
CVE-2025-64436Medium· 5.3KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes
CVE-2024-33394Medium· 5.9kubevirt allows a local attacker to execute arbitrary code via a crafted command
CVE-2025-64324High· 7.7KubeVirt Vulnerable to Arbitrary Host File Read and Write
CVE-2025-64437Medium· 5.0KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes