{"id":"CVE-2024-1725","aliases":["EUVD-2024-17457","GHSA-fg9q-5cw2-p6r9","GO-2025-3512","openSUSE-SU-2025:14893-1"],"status":"published","title":"Kubevirt-csi: persistentvolume allows access to hcp's root node","description":"A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00631,"percentile":0.50598,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-501"],"published":"2024-03-07T20:09:11Z","modified":"2026-06-17T07:04:52Z","fixes":[{"ecosystem":"Go","package":"github.com/kubevirt/csi-driver","fixed_in":["0.0.0-202403081943-cc28dcbb0afc14"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/kubevirt/csi-driver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0-202403081943-cc28dcbb0afc14"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/kubevirt/csi-driver","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.0.0-202403081943-cc28dcbb0afc14"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/kubevirt/csi-driver","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250313T170021-1.1"}]}],"bundled":6}],"products":[{"vendor":"red hat","product":"red hat openshift container platform 4.13"},{"vendor":"red hat","product":"red hat openshift container platform 4.14"},{"vendor":"red hat","product":"red hat openshift container platform 4.15"},{"vendor":"redhat","product":"openshift_container_platform"},{"vendor":"redhat","product":"openshift_container_platform_for_arm64"},{"vendor":"redhat","product":"openshift_container_platform_for_ibm_z"},{"vendor":"redhat","product":"openshift_container_platform_for_linuxone"},{"vendor":"redhat","product":"openshift_container_platform_for_power"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:1559","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1891","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2047","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-1725","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Vendor Advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265398","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1725","tags":["advisory"]},{"url":"https://github.com/kubevirt/csi-driver/commit/cc28dcbb0afca0a7cb8a73bc998ab49f864ed560","tags":["web","fix"]},{"url":"https://pkg.go.dev/vuln/GO-2025-3512","tags":["web"]},{"url":"https://github.com/advisories/GHSA-fg9q-5cw2-p6r9","tags":["advisory"]},{"url":"https://github.com/kubevirt/csi-driver","tags":["package"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IISU33DXNWHOYGRCT77IPABZTMARV5T6/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-52812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-26260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27616","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-1725","title":"Kubevirt-csi: persistentvolume allows access to hcp's root node","description":"A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.","status":"published","published":"2024-03-07T20:09:11.616Z","modified":"2025-11-14T01:32:09.565Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-501"],"updated_at":"2026-11-02T14:34:17.865042Z"}],"euvd":[{"id":"EUVD-2024-17457","description":"A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.","status":"published","published":"2024-03-07T20:09:11Z","modified":"2025-11-14T01:32:09Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:17.485718Z"}],"ghsa":[{"id":"GHSA-fg9q-5cw2-p6r9","title":"kubevirt-csi: PersistentVolume allows access to HCP's root node","description":"A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.","status":"published","published":"2024-03-07T21:30:21Z","modified":"2025-03-14T19:54:14Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-501"],"updated_at":"2026-11-02T14:38:34.992855Z"}],"nvd":[{"id":"CVE-2024-1725","description":"A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.","status":"published","published":"2024-03-07T20:15:50.69Z","modified":"2026-06-17T07:04:52.583Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-501"],"updated_at":"2026-11-02T14:09:39.488031Z"}],"osv":[{"id":"GHSA-fg9q-5cw2-p6r9","title":"kubevirt-csi: PersistentVolume allows access to HCP's root node","description":"A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.","status":"published","published":"2024-03-07T21:30:21Z","modified":"2025-03-14T19:54:12Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-501"],"updated_at":"2026-11-02T15:46:46.39441Z"},{"id":"GO-2025-3512","title":"kubevirt-csi: PersistentVolume allows access to HCP's root node in github.com/kubevirt/csi-driver","description":"kubevirt-csi: PersistentVolume allows access to HCP's root node in github.com/kubevirt/csi-driver.\n\nNOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.\n\n(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)\n\nThe additional affected modules and versions are: github.com/kubevirt/csi-driver before v0.0.0-202403081943-cc28dcbb0afc14.","status":"published","published":"2025-03-13T14:46:08Z","modified":"2025-03-13T15:25:41.207054Z","updated_at":"2026-11-02T15:47:01.728182Z"},{"id":"openSUSE-SU-2025:14893-1","title":"govulncheck-vulndb-0.0.20250313T170021-1.1 on GA media","description":"These are all security issues fixed in the govulncheck-vulndb-0.0.20250313T170021-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-15T00:00:00Z","modified":"2026-02-04T02:27:34.351525Z","updated_at":"2026-11-02T16:58:37.399567Z"}]}}