CVE-2025-14459

Impact

A flaw was found in KubeVirt Containerized Data Importer (CDI). This vulnerability allows a user to clone PersistentVolumeClaims (PVCs) from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://access.redhat.com/errata/RHSA-2026:0950
• https://access.redhat.com/security/cve/CVE-2025-14459
• https://bugzilla.redhat.com/show_bug.cgi?id=2420938
• https://access.redhat.com/errata/RHSA-2026:0950
• https://access.redhat.com/security/cve/CVE-2025-14459
• https://bugzilla.redhat.com/show_bug.cgi?id=2420938
• https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14459.json