tocsin

Go/kubevirt.io/kubevirt CVE-2026-7374: unknown, EPSS 0.74%

KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt

Action: Upgrade kubevirt.io/kubevirt to 1.6.6 or later.

go get kubevirt.io/kubevirt@v1.6.6
go get kubevirt.io/kubevirt@v1.7.4
go get kubevirt.io/kubevirt@v1.8.3

Affected

introducedfixedlast affected
01.6.6-
1.7.0-alpha.01.7.4-
1.8.0-alpha.01.8.3-

Fixed versions

1.6.61.7.41.8.3

Sources

CVE-2026-7374 · published · modified · JSON