CVE-2022-1798

    Dashboard / Vulnerabilities / CVE-2022-1798

    CVE-2022-1798

    Published: 15 Sept 2022Last Modified: 12 Aug 2026

    Summary: Path Traversal vulnerability in Kubevirt

    Details: A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the kubevirt to read arbitrary files on the host filesystem which are publicly readable or which are readable for UID 107 or GID 107. /proc/self/<> is not accessible.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1798.json, https://github.com/kubevirt/kubevirt/security/advisories/GHSA-qv98-3369-g364, https://nvd.nist.gov/vuln/detail/CVE-2022-1798

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 7ca2ed8f64c6d55be9baff93bcac8585b1a18575
    Fixed -280bf4114be52fdae27db0e946a8245e9dcfc6f1

    Affected versions

    v0.55.0-rc.0
    v0.55.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-1798 | CVE-DB