CVE-2025-64432: KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer
(updated )
_Short summary of the problem. Make the impact and severity as clear as possible.
A flawed implementation of the Kubernetes aggregation layer’s authentication flow could enable bypassing RBAC controls.
References
- github.com/advisories/GHSA-38jw-g2qx-4286
- github.com/kubevirt/kubevirt
- github.com/kubevirt/kubevirt/commit/231dc69723f331dc02f65a31ab4c3d6869f40d6a
- github.com/kubevirt/kubevirt/commit/af2f08a9a186eccc650f87c30ab3e07b669e8b5b
- github.com/kubevirt/kubevirt/commit/b9773bc588e6e18ece896a2dad5336ef7a653074
- github.com/kubevirt/kubevirt/security/advisories/GHSA-38jw-g2qx-4286
- nvd.nist.gov/vuln/detail/CVE-2025-64432
Code Behaviors & Features
Detect and mitigate CVE-2025-64432 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →