Cloudanix VulnDB

CVE-2025-64432

Medium · 4.7

CVSS

4.7

EPSS

0.1%

Published

Nov 7, 2025

CISA due date

—

The record

KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer

Affected packages

Ecosystem Package Introduced Fixed
Go kubevirt.io/kubevirt 0 1.5.3
Go kubevirt.io/kubevirt 1.6.0-alpha.0 1.6.0-beta.0.0.20250730135146-231dc69723f3
Go kubevirt.io/kubevirt 1.6.0-alpha.0 1.6.1
Go kubevirt.io/kubevirt 1.6.0-rc.0 1.6.1
Go kubevirt.io/kubevirt 1.7.0-alpha.0 1.7.0-rc.0
Chainguard docker-machine-driver-harvester 0 1.0.5-r0
Wolfi docker-machine-driver-harvester 0 1.0.5-r0
go kubevirt.io/kubevirt 1.6.0-alpha.0 1.6.1
go kubevirt.io/kubevirt 1.6.0-rc.0 1.6.1
go kubevirt.io/kubevirt 1.6.2 1.7.0-rc.0
go kubevirt.io/kubevirt 1.7.0-alpha.0 1.7.0-rc.0
openSUSE:Leap 16.0 kubevirt 0 1.7.0-160000.1.1

Related vulnerabilities