CVE-2026-7374 flaw lets attackers escape KubeVirt namespaces

A serious security flaw, tracked as CVE-2026-7374, has been identified in KubeVirt, allowing authenticated users to escape namespaces and potentially control entire Kubernetes clusters. This vulnerability has a high CVSS score of 9.9 and is due to improper symlink validation in the virt-handler component. Attackers can exploit this by replacing genuine console sockets with malicious symbolic links to gain unauthorized access to host resources.

Recommended mitigations include enforcing strict Role-Based Access Control (RBAC) policies and continuous infrastructure monitoring to detect anomalous activity. Patching KubeVirt is crucial for preventing exploitation.