GO-2026-4384
NoneCVSS
—
EPSS
—
Published
Feb 2, 2026
CISA due date
—
The record
KubeVirt Guest Agent DoS via Excessive Network Interface Reports in kubevirt.io/kubevirt
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | kubevirt.io/kubevirt | 0 | No fix |
Related vulnerabilities
- CVE-2025-14525 A flaw was found in kubevirt. Same vulnerability
- GO-2025-4105 KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation in kubevirt.io/kubevirt Also affects kubevirt.io/kubevirt
- GO-2025-4104 KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between… Also affects kubevirt.io/kubevirt
- CVE-2025-64432 KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer Also affects kubevirt.io/kubevirt
- CVE-2025-64324 KubeVirt Vulnerable to Arbitrary Host File Read and Write Also affects kubevirt.io/kubevirt
- CVE-2025-64433 KubeVirt Arbitrary Container File Read Also affects kubevirt.io/kubevirt
- CVE-2025-64435 KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation Also affects kubevirt.io/kubevirt
- CVE-2025-64436 KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes Also affects kubevirt.io/kubevirt