CVE-2025-13193 Libvirt: information disclosure via world-readable vm snapshots
Unprivileged users can read world-readable VM snapshot files to inspect guest OS contents, requiring a patch to restrict file permissions.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-13193?
CVE-2025-13193 is a medium-severity vulnerability in Red Hat Enterprise Linux 10, published on 17 Nov 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it possible for unprivileged users to inspect the guest OS contents. This results in an information disclosure vulnerability.
Weakness: CWE-276
Which versions are affected by CVE-2025-13193?
How do I fix CVE-2025-13193?
Apply the vendor's patch.
Is CVE-2025-13193 being exploited?
There is no known exploitation of CVE-2025-13193 in the wild and no public exploit code.
Sources
Also known as AZL-70598, BELL-CVE-2025-13193, DEBIAN-CVE-2025-13193, GHSA-223c-8f3h-q9f9, OESA-2025-2891, OESA-2025-2892 and 4 more.