MEDIUM 5.5 NVD

CVE-2026-63623

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines.

References

https://access.redhat.com/security/cve/CVE-2026-63623
https://bugzilla.redhat.com/show_bug.cgi?id=2513066

Published: 2026-08-10 · Source: NVD · Feed updated: 2026-08-10

This medium severity vulnerability with a CVSS score of 5.5 was published on 2026-08-10 via NVD.

vulnfeed aggregates 7833 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.