{"action":"Upgrade kubevirt.io/kubevirt to 1.6.6 or later.","affected":[{"fixed":"1.6.6","introduced":"0"},{"fixed":"1.7.4","introduced":"1.7.0-alpha.0"},{"fixed":"1.8.3","introduced":"1.8.0-alpha.0"}],"component":"kubevirt.io/kubevirt","cve_ids":["CVE-2026-7374"],"ecosystem":"Go","epss":0.00742,"exploited":false,"fixed_versions":["1.6.6","1.7.4","1.8.3"],"ghsa_id":"GHSA-7jcp-v9w4-wjmg","id":"tcs_01M5KGQ8VH4G65KATPQW2YFNH4","modified_at":"2026-07-07T16:01:34.756255829Z","published_at":"2026-07-07T15:26:32Z","references":["https://osv.dev/vulnerability/GO-2026-5848","https://github.com/advisories/GHSA-7jcp-v9w4-wjmg","https://nvd.nist.gov/vuln/detail/CVE-2026-7374","https://access.redhat.com/errata/RHSA-2026:20720","https://access.redhat.com/errata/RHSA-2026:20736","https://access.redhat.com/errata/RHSA-2026:20763","https://access.redhat.com/errata/RHSA-2026:20767","https://access.redhat.com/errata/RHSA-2026:20782","https://access.redhat.com/errata/RHSA-2026:20825","https://access.redhat.com/errata/RHSA-2026:20866","https://access.redhat.com/errata/RHSA-2026:20886","https://access.redhat.com/errata/RHSA-2026:20890","https://access.redhat.com/errata/RHSA-2026:20975","https://access.redhat.com/security/cve/CVE-2026-7374","https://bugzilla.redhat.com/show_bug.cgi?id=2463728","https://github.com/kubevirt/kubevirt/commit/011eef8129e2c21e0ea496f283ee1676009bc757","https://github.com/kubevirt/kubevirt/pull/17916","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7374.json"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-5848","url":"https://osv.dev/vulnerability/GO-2026-5848"}],"summary":"KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt"}