Red Hat - Red Hat Openshift Virtualization 4 - CRITICAL - CVE-2026-7374. A flaw in the virt-handler component of KubeVirt allows authenticated OpenShift users with edit permissions to exploit improper symlink validation when accessing virtual machine console sockets. By substituting the console socket with a symlink to the host's container runtime (CRI-O) socket, attackers can hijack the privileged connection of virt-handler. This may grant them unauthorized access to Unix sockets on the host, potentially compromising the integrity and security of the entire node and cluster.