CVE-2022-1798 Path Traversal vulnerability in Kubevirt
A path traversal flaw in KubeVirt allows attackers to read arbitrary host files accessible to UID 107, impacting containerized virtualization environments.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-1798?
CVE-2022-1798 is a high-severity path traversal vulnerability in Google LLC Kubevirt, published on 15 Sep 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the kubevirt to read arbitrary files on the host filesystem which are publicly readable or which are readable for UID 107 or GID 107. /proc/self/<> is not accessible.
Which versions are affected by CVE-2022-1798?
3 open source packages ship an affected version, including kubevirt.io/kubevirt. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
kubevirt.io/kubevirt Go | From 0.20.0 | 0.55.1 |
kubevirt.io/kubevirt Go | From 0.20.0 | 0.55.1 |
kubevirt.io/kubevirt Go | From 0.20.0 | 0.55.1 |
Products include Kubevirt Kubevirt.
How do I fix CVE-2022-1798?
Upgrade kubevirt.io/kubevirt to 0.55.1 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2022-1798 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-1798 exists.
Other vulnerabilities in Google LLC Kubevirt
- CVE-2020-14316 Privilege Escalation in kubevirt
- CVE-2025-64324 KubeVirt Vulnerable to Arbitrary Host File Read and Write
- CVE-2023-26484 On a compromised KubeVirt node, the virt-handler service account can be used to modify all node specs
- CVE-2026-13201 Path traversal in Red Hat Container Native Virtualization 4.12
- CVE-2025-64436 KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes
Sources
Also known as AZL-10974, GHSA-qv98-3369-g364, GO-2022-1000.