VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Apr 15, 2026· Updated Apr 17, 2026

CVE-2026-6383

CVE-2026-6383

Description

A flaw was found in KubeVirt's Role-Based Access Control (RBAC) evaluation logic. The authorization mechanism improperly truncates subresource names, leading to incorrect permission evaluations. This allows authenticated users with specific custom roles to gain unauthorized access to subresources, potentially disclosing sensitive information or performing actions they are not permitted to do. Additionally, legitimate users may be denied access to resources.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
kubevirt.io/kubevirtGo
<= 1.8.1—

Affected products

18

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.