# CVE-2026-7374

## Summary

- **CVE ID:** CVE-2026-7374
- **Severity:** CRITICAL
- **CVSS Score:** 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
- **CWE:** CWE-59
- **Published:** May 26, 2026
- **Last Modified:** Sep 10, 2026

## Description

A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing the console socket with a symlink to the host's container runtime (CRI-O) socket, an attacker can hijack virt-handler's privileged connection. This enables the attacker to access any Unix socket on the host, potentially leading to full control of the node and the entire cluster.

## Affected Products

- Red Hat — Red Hat Container Native Virtualization 4.12 (1779375376)
- Red Hat — Red Hat Container Native Virtualization 4.13 (1778999881)
- Red Hat — Red Hat Container Native Virtualization 4.14 (1779321599)
- Red Hat — Red Hat Container Native Virtualization 4.15 (1778859977)
- Red Hat — Red Hat Container Native Virtualization 4.16 (1778861274)
- Red Hat — Red Hat Container Native Virtualization 4.17 (1779174925)
- Red Hat — Red Hat Container Native Virtualization 4.18 (1778887155)
- Red Hat — Red Hat Container Native Virtualization 4.2 (1779288737)
- Red Hat — Red Hat Container Native Virtualization 4.21 (1779420069)
- Red Hat — Red Hat Container Native Virtualization 4.19 (1779289071)
- Red Hat — Red Hat Container Native Virtualization 4.20 (1779288737)
- Unknown product (0)
- Unknown product (1.7.0)
- Unknown product (1.8.0)

## References

- [CNA](https://access.redhat.com/security/cve/CVE-2026-7374)
- [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2463728)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20720)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20736)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20763)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20782)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20825)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20866)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20886)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20890)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20975)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20767)
- [redhat-SADP](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7374.json)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.74%
- **EPSS Percentile:** 53.0

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._