CVE-2025-14459

EUVD-2025-206337
A flaw was found in KubeVirt Containerized Data Importer (CDI). This vulnerability allows a user to clone PersistentVolumeClaims (PVCs) from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.5 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 26.79%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-4 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-3 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17.rhel9-82 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-4 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-4 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-4 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-7 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-7 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-6 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-85 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-9 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-11 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-9 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-19 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-9 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-9 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-9 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-88 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-9 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-8 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-8 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-8 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-7 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-7 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-7 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-8 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-8 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-9 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-9 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-9 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-9 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-4 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-9 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-12 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Red HatRHEL-9-CNV-4.19
v4.19.17-5 ≤
𝑥
< *
ADP
Azure Linux logo
Azure Linux Releases
Azure Package
Release
kubevirt
Azure Linux 3.0
0:1.7.0-1.azl3
fixed
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2026:0950
https://access.redhat.com/security/cve/CVE-2025-14459
https://bugzilla.redhat.com/show_bug.cgi?id=2420938
https://access.redhat.com/errata/RHSA-2026:0950
https://access.redhat.com/security/cve/CVE-2025-14459
https://bugzilla.redhat.com/show_bug.cgi?id=2420938
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14459.json