{"action":"Upgrade kubevirt.io/kubevirt to 1.6.6 or later.","affected":[{"fixed":"1.8.3","introduced":"1.8.0-alpha.0"},{"fixed":"1.7.4","introduced":"1.7.0-alpha.0"},{"fixed":"1.6.6","introduced":"0"}],"component":"kubevirt.io/kubevirt","cve_ids":["CVE-2026-7374"],"ecosystem":"Go","epss":0.00742,"exploited":false,"fixed_versions":["1.8.3","1.7.4","1.6.6"],"ghsa_id":"GHSA-7jcp-v9w4-wjmg","id":"tcs_01M5KF276FGN6Z9A76XYTBKZH0","modified_at":"2026-09-10T03:50:46.239164927Z","published_at":"2026-05-26T15:32:10Z","references":["https://osv.dev/vulnerability/GHSA-7jcp-v9w4-wjmg","https://nvd.nist.gov/vuln/detail/CVE-2026-7374","https://github.com/kubevirt/kubevirt/pull/17916","https://github.com/kubevirt/kubevirt/commit/011eef8129e2c21e0ea496f283ee1676009bc757","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7374.json","https://github.com/kubevirt/kubevirt","https://bugzilla.redhat.com/show_bug.cgi?id=2463728","https://access.redhat.com/security/cve/CVE-2026-7374","https://access.redhat.com/errata/RHSA-2026:20975","https://access.redhat.com/errata/RHSA-2026:20890","https://access.redhat.com/errata/RHSA-2026:20886","https://access.redhat.com/errata/RHSA-2026:20866","https://access.redhat.com/errata/RHSA-2026:20825","https://access.redhat.com/errata/RHSA-2026:20782","https://access.redhat.com/errata/RHSA-2026:20767","https://access.redhat.com/errata/RHSA-2026:20763","https://access.redhat.com/errata/RHSA-2026:20736","https://access.redhat.com/errata/RHSA-2026:20720"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-7jcp-v9w4-wjmg","url":"https://osv.dev/vulnerability/GHSA-7jcp-v9w4-wjmg"}],"summary":"KubeVirt has a Link Following vulnerability"}