A critical privilege escalation vulnerability in Red Hat OpenShift Virtualization 4 allows local attackers to achieve full node compromise via symbolic link manipulation.

This is a path traversal and privilege escalation vulnerability where an attacker with namespace edit and pods/exec permissions can manipulate Unix socket paths during live migration to bypass security boundaries.

The CVSS score of 8.8 reflects the high risk of full node compromise, which could lead to the complete takeover of virtualized workloads and the underlying host. This vulnerability could result in unauthorized access to sensitive data processed by virtual machines and the total loss of control over the virtualization infrastructure.

Immediate Action: Apply the vendor security updates immediately to resolve the path validation flaw in the migration proxy.

Proactive Monitoring: Audit pod execution logs and monitor for suspicious file system operations involving Unix sockets within the virtualization namespace.

Compensating Controls: Enforce strict Kubernetes Network Policies and Pod Security Admissions to restrict the ability of users to execute commands within pods, thereby reducing the risk of exploitation.

Public Exploit Available: No

The ability to escalate to full node compromise makes this vulnerability a high priority for remediation. Infrastructure teams should verify their OpenShift Virtualization versions and apply the necessary patches provided by Red Hat as soon as they become available.