Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile and os.Chown without symlink protection. A user with access to the virt-launcher container can plant a symlink at the cache file path, causing virt-handler to follow it and overwrite an arbitrary host file with JSON content and change its ownership.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
CVE-2026-13218 Arbitrary File Overwrite in KubeVirt virt-handler via Symlink in Network Cache https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-13218
Post summary
The post announces CVE-2026-13218, highlighting an arbitrary file overwrite vulnerability in KubeVirt, but provides no PoC, exploit code, or patch details.
🚨*CVE* CVE-2026-13218 A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile and os.Cho… https://www.cve.org/CVERecord?id=CVE-2026-13218 ----- Traducción: Se encontró una fa… http://infoflow.cloud`
Post summary
A new vulnerability (CVE‑2026‑13218) was identified in KubeVirt's virt-handler, where the WriteToCachedFile function writes data to a launcher-rooted path; no PoC, exploit, patch, or active exploitation information is provided.
CVE-2026-13218 A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile and os.Cho… https://www.cve.org/CVERecord?id=CVE-2026-13218
Post summary
The text announces a discovered flaw in KubeVirt’s virt‑handler cache handling, providing limited technical detail but no PoC, exploits, patches, or evidence of active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | kubevirt | kubevirt | - | kubernetes | - |
| App | redhat | openshift_virtualization | - | - | - |