kubevirt — Vulnerabilities & Security Advisories 9

KubeVirt enables virtual machine management within Kubernetes environments, bridging traditional VM workloads with container orchestration. Historically, it has faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, often stemming from API misconfigurations or insecure default settings. The project maintains a security-focused approach, with regular patches addressing identified issues. While no major public incidents have been widely reported, the presence of nine CVEs underscores the importance of diligent maintenance and access control when deploying virtual machines in Kubernetes clusters.