HIGH 7.8 NVD
CVE-2026-63622
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in t
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, the attacker could trick the root-level libvirt daemon into changing the ownership of an arbitrary file to the `swtpm` user. This allows for privilege escalation from the `swtpm` sandbox to root-level file ownership control.
References
- https://access.redhat.com/security/cve/CVE-2026-63622
- https://bugzilla.redhat.com/show_bug.cgi?id=2513065
This high severity vulnerability with a CVSS score of 7.8 was published on 2026-08-10 via NVD.
vulnfeed aggregates 7836 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.