CyberICT

CVE-2026-6383

Microsoft · Published May 7, 2026

CVSS v3.1

MEDIUM
Patch availableGet patch

Description

Kubevirt: kubevirt: unauthorized subresource access due to improper rbac evaluation. Kubevirt: kubevirt: unauthorized subresource access due to improper rbac evaluation

Affected Products

  • cbl2 kubevirt 0.59.0-38 on CBL Mariner 2.0
  • azl3 kubevirt 1.7.1-2 on Azure Linux 3.0
  • azl3 kubevirt 1.7.1-7 on Azure Linux 3.0
  • azl3 kubevirt 1.7.1-8 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N