redhat/container-native-virtualization/virt-cdi-operator vulnerabilities

Latest redhat/container-native-virtualization/virt-cdi-operator CVEs

Newest publication first

1. CVE-2026-119566 Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects

   Published 2026-10-30

   Medium·CVSS 6.3 EPSS 0.20%

   Prometheus through 3.15.1 contains a credential leak vulnerability that allows attackers to capture Azure AD or Google IAM bearer tokens by redirecting remote_write requests to another host. Attackers controlling the remote-write endpoint or a redirecting server can return a 3xx...

2. CVE-2026-17527 Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone

   Published 2026-07-27

   High·CVSS 7.7 EPSS 0.58%

   In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI's DataVolume clone authorization accepts this permission as suf...

3. CVE-2026-39833 Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

   Published 2026-05-22

   Critical·CVSS 9.1 EPSS 0.47%

   The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign without any confirmation prompt, with no indication to the caller that the constraint was not in effect. NewKeyring() now returns a...

4. CVE-2025-14946 Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri

   Published 2025-12-19

   Medium·CVSS 4.8 EPSS 0.14%

   A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier (URI). This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure...

5. CVE-2025-65637 Logrus is vulnerable to DoS when using Entry.Writer()

   Published 2025-12-04

   High·CVSS 7.5 EPSS 0.68% PoC

   A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.