CVE-2026-13318 Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip
An attacker with edit permissions can exploit unvalidated guest agent IPs in KubeVirt to perform SSRF, bypassing network policies and accessing internal services.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-13318?
CVE-2026-13318 is a medium-severity server-side request forgery vulnerability in Red Hat OpenShift Virtualization 4, published on 25 Jun 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A server-side request forgery (SSRF) flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance (VMI), virt-api reads the target IP from vmi.Status.Interfaces[0].IP and passes it directly to net.Dial() without validation. For VMIs using non-masquerade network bindings (bridge or secondary-only), this IP is reported by the QEMU guest agent running inside the VM and is fully controllable by the VM owner. An attacker with kubevirt.io:edit permissions can create a VM with a modified guest agent that reports an arbitrary IP address, then request port-forward to establish a bidirectional TCP tunnel from virt-api's cluster-internal network position to any routable destination, bypassing NetworkPolicy isolation.
Weakness: CWE-918
Which versions are affected by CVE-2026-13318?
It affects 2 products.
Products include Kubevirt Kubevirt, Redhat Openshift Virtualization.
How do I fix CVE-2026-13318?
No fix has been published for CVE-2026-13318 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-13318 being exploited?
There is no known exploitation of CVE-2026-13318 in the wild and no public exploit code.
Other vulnerabilities in Red Hat OpenShift Virtualization 4
- CVE-2020-14316 Privilege Escalation in kubevirt
- CVE-2022-1798 Path Traversal vulnerability in Kubevirt
- CVE-2025-64324 KubeVirt Vulnerable to Arbitrary Host File Read and Write
- CVE-2023-26484 On a compromised KubeVirt node, the virt-handler service account can be used to modify all node specs
- CVE-2026-13201 Path traversal in Red Hat Container Native Virtualization 4.12
Sources
Also known as AZL-91457, GHSA-cgm6-wvp9-4g5h, MINI-fhwq-473v-v2rj, MINI-jjgp-vjmc-h48v.