CVE-2025-13193

Published: Nov 17, 2025Modified: Jun 30, 2026Deferred

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it possible for unprivileged users to inspect the guest OS contents. This results in an information disclosure vulnerability.

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (2)

https://access.redhat.com/security/cve/CVE-2025-13193

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2415409

Source: secalert@redhat.com

Timeline

No history available yet.