Database/Container, Kubernetes & orchestration
KubeVirt: hostDisk feature mounts host files into a VM with insufficient restriction
CVE-2025-64324Container, Kubernetes & orchestrationcurated
Impact
hostDisk feature mounts host files into a VM with insufficient restriction; host data exposure
Who can reach it
Cluster user able to create a VM with hostDisk
What to do
Upgrade KubeVirt to 1.6.1/1.7.0+; disable the hostDisk feature gate for tenants
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.