tocsin

CVE-2025-64432

2 advisories.

Go/kubevirt.io/kubevirt CVE-2025-64432: medium 4.7

KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer

Action: Upgrade kubevirt.io/kubevirt to 1.5.3 or later.

go get kubevirt.io/kubevirt@v1.5.3
go get kubevirt.io/kubevirt@v1.6.1
go get kubevirt.io/kubevirt@v1.7.0-rc.0

Affected

introducedfixedlast affected
01.5.3-
1.6.0-alpha.01.6.1-
1.7.0-alpha.01.7.0-rc.0-

Fixed versions

1.5.31.6.11.7.0-rc.0

Sources

CVE-2025-64432 · published · modified · JSON

Go/kubevirt.io/kubevirt CVE-2025-64432: unknown

KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer in kubevirt.io/kubevirt

Action: Upgrade kubevirt.io/kubevirt to 1.5.3 or later.

go get kubevirt.io/kubevirt@v1.5.3
go get kubevirt.io/kubevirt@v1.6.0-beta.0.0.20250730135146-231dc69723f3
go get kubevirt.io/kubevirt@v1.6.1
go get kubevirt.io/kubevirt@v1.7.0-rc.0

Affected

introducedfixedlast affected
01.5.3-
1.6.0-alpha.01.6.0-beta.0.0.20250730135146-231dc69723f3-
1.6.0-rc.01.6.1-
1.6.21.7.0-rc.0-

Fixed versions

1.5.31.6.0-beta.0.0.20250730135146-231dc69723f31.6.11.7.0-rc.0

Sources

CVE-2025-64432 · published · modified · JSON