CVE-2024-33394: Kubevirt

Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component.

Affected products

• Kubevirt Kubevirt: up to and including 1.2.0

Published 2024-05-02. Last modified 2026-06-17.