Description
In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI's DataVolume clone authorization accepts this permission as sufficient to authorize cloning the contents of any PVC the caller can name, without requiring write access to the source namespace. A user or service account bound to the view role, commonly granted cluster-wide via ClusterRoleBinding, who also has ordinary write access (edit/admin) to any single namespace, can use this to exfiltrate the contents of any PVC in the cluster into a namespace they control, bypassing namespace isolation and the read-only guarantee of the view role.
Published: 2026-07-27
Score: 7.7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability stems from CDI’s aggregated cdi.kubevirt.io:view ClusterRole which unexpectedly includes a create permission on the datavolumes/source subresource. CDI interprets this permission as sufficient to clone any PVC that a caller can name, even if the caller lacks write access to the source namespace. Consequently a subject bound to this view role cluster‑wide, and who also holds standard edit or admin rights to a namespace, can clone the contents of any PVC in the cluster into a namespace they control. This bypasses the intended read‑only guarantee and allows data exfiltration.

Affected Systems

Red Hat OpenShift Virtualization 4, the container‑native virtualization platform from Red Hat.

Risk and Exploitability

The CVSS score of 7.7 classifies the issue as high severity, while the EPSS score of < 1% indicates a very low but nonzero probability of exploitation. The vulnerability is not listed in the CISA KEV catalog, meaning no confirmed exploitation in production has been reported. The likely attack vector involves misconfigured RBAC: a cluster administrator granting the cdi.kubevirt.io:view role via a ClusterRoleBinding, and a subject that also holds edit or admin rights within at least one namespace. With those privileges, the user can exploit the create rule on datavolumes/source to clone PVC data into a namespace under their control.

Generated by OpenCVE AI on August 3, 2026 at 17:55 UTC.

Remediation

Vendor Workaround

Until a fix is available, cluster administrators should avoid granting cdi.kubevirt.io:view (or the built-in Kubernetes view role, which aggregates it) via cluster-wide ClusterRoleBinding. Prefer namespace-scoped RoleBindings, and audit which namespaces grant both view-equivalent access and separate edit/admin access to the same identities, since that combination is what enables cross-namespace data exfiltration.

OpenCVE Recommended Actions

  • Avoid granting cdi.kubevirt.io:view through cluster‑wide ClusterRoleBindings; instead bind the role with namespace‑scoped RoleBindings and limit its scope to the intended namespaces.
  • Audit the cluster to identify any identities that possess both view‑equivalent permissions and edit or admin rights within the same namespace, and remove or segregate those permissions to prevent cross‑namespace data exfiltration.
  • Restrict DataVolume clone operations to trusted service accounts or users that have legitimate need, and monitor usage to detect anomalous or unauthorized cloning attempts.
  • When an official patch becomes available, promptly apply it to eliminate the privilege escalation path.

Generated by OpenCVE AI on August 3, 2026 at 17:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 28 Jul 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Important

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 27 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat openshift Virtualization
Vendors & Products Redhat openshift Virtualization

Mon, 27 Jul 2026 10:15:00 +0000

Type Values Removed Values Added
Description In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI's DataVolume clone authorization accepts this permission as sufficient to authorize cloning the contents of any PVC the caller can name, without requiring write access to the source namespace. A user or service account bound to the view role, commonly granted cluster-wide via ClusterRoleBinding, who also has ordinary write access (edit/admin) to any single namespace, can use this to exfiltrate the contents of any PVC in the cluster into a namespace they control, bypassing namespace isolation and the read-only guarantee of the view role.
Title Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone
First Time appeared Redhat
Redhat container Native Virtualization
Weaknesses CWE-639
CPEs cpe:/a:redhat:container_native_virtualization:4
Vendors & Products Redhat
Redhat container Native Virtualization
References
Metrics cvssV3_1

{'score': 7.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N'}

Subscriptions

Redhat Container Native Virtualization Openshift Virtualization
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-07-27T18:09:27.103Z

Reserved: 2026-07-27T08:42:15.783Z

Link: CVE-2026-17527

cve-icon Vulnrichment

Updated: 2026-07-27T18:09:21.747Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-07-27T10:16:37.617

Modified: 2026-07-27T20:37:16.927

Link: CVE-2026-17527

cve-icon Redhat

Severity : Important

Publid Date: 2026-07-27T00:00:00Z

Links: CVE-2026-17527 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T18:00:11Z

Weaknesses
  • CWE-639

    Authorization Bypass Through User-Controlled Key