PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Kubevirt security audit

blog.quarkslab.com | research | #kubernetes | #virtualization | #vulnerability | #audit | #ostif | #kubevirt
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab's KubeVirt audit via OSTIF and the Sovereign Tech Fund: 15 vulnerabilities, including arbitrary host file read/write (CVE-2025-64324) and an aggregation-layer auth bypass.
Published
Collected

Related coverage

vulnerability · blog.quarkslab.com
MbedTLS Security Audit
At the request of the Open Source Technology Improvement Fund (OSTIF), Quarkslab performed a security audit of mbedTLS, evaluating the security of the changes in version 4.0.
blog · bishopfox.com
Zilliz / Attu | 2.6.5
Bishop Fox disclosed two flaws in Zilliz Attu 2.6.5, the Milvus management UI. An unauthenticated SSRF combined with a regex validation bypass chains into Kubernetes namespace takeover, exposing entire clusters to attackers.
research · blog.quarkslab.com
Cortex Security Audit
Quarkslab audited Cortex, a multi-tenant Prometheus time-series store, for OSTIF: seven findings, including tenant impersonation via PushStream gRPC, were identified and all resolved.
research · blog.quarkslab.com
Extending LLVM's BOLT-based Binary Analyser to Validate Stack Variable Initialisation
Quarkslab extended LLVM's BOLT-based binary analyser for OSTIF with a scanner that validates -ftrivial-auto-var-init at the binary level, verifying stack-variable initialisation hardening.
research · blog.quarkslab.com
Scala Security Audit
Quarkslab's security audit of Scala 3 for OSTIF: threat modeling, manual review, static analysis and fuzzing across the compiler, standard library, REPL, TASTy Inspector and doc generator.
research · blog.quarkslab.com
The IGVM File Format
Quarkslab walks through the IGVM file format, which bundles a VM's BIOS/OVMF, kernel and initrd for secure launch across isolation stacks like AMD SEV-SNP and Intel TDX.
Back