# CVE-2025-13193: libvirt world-readable permissions in VM snapshots

Source: https://junglewise.ai/threats/cve-2025-13193-libvirt-world-readable-permissions-in-vm-snapshots  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-11-17. Updated: 2026-06-25  
License: CC BY 4.0 with a link back

CVE-2025-13193 · Severity: medium · CVSS 5.5 · Published 2025-11-17

A security flaw was found in libvirt, a tool used to manage virtualization platforms. When snapshots are created for virtual machines that are powered off, the resulting files are set with incorrect permissions that allow any user on the host system to read them. This could allow an unauthorized person to access sensitive data stored within the virtual machine's operating system.

Technologies: [Red Hat Enterprise Linux 10](https://junglewise.ai/threats/technologies/enterprise-linux-10), [Red Hat Enterprise Linux 8](https://junglewise.ai/threats/technologies/enterprise-linux-8), [Red Hat Enterprise Linux 9](https://junglewise.ai/threats/technologies/enterprise-linux-9), [Red Hat In-Vehicle Operating System 1](https://junglewise.ai/threats/technologies/in-vehicle-operating-system-1). Vendors: [Red Hat](https://junglewise.ai/threats/vendors/red-hat).

## Quick answers

**Is CVE-2025-13193 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-13193 being exploited in the wild.

**How severe is CVE-2025-13193?** Medium severity, with a CVSS score of 5.5, published 17 November 2025.

**Which products and versions are affected?** libvirt libvirt < 11.10.0; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 10; and 1 more.

**Is there a fix for CVE-2025-13193?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-13193 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2025-13193?** Check whether you run Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability classified as Incorrect Default Permissions (CWE-276) exists in libvirt. When creating external inactive snapshots for virtual machines in a shut-down state, the software fails to restrict file permissions, resulting in world-readable snapshot files. A local, unprivileged attacker can exploit this to read the disk image contents of the guest OS, bypassing intended isolation boundaries. The issue is addressed in libvirt version 11.10.0 and via upstream patches.

## Affected products

- libvirt libvirt < 11.10.0
- Red Hat Red Hat Enterprise Linux 8
- Red Hat Red Hat Enterprise Linux 9
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat In-Vehicle Operating System 1

## Timeline

- 2025-11-17: disclosed: Initial report and CVE assignment
- 2025-11-17: advisory: NVD and Red Hat advisories published

## References

- [https://gitlab.com/libvirt/libvirt](https://gitlab.com/libvirt/libvirt)
- [https://access.redhat.com/downloads/content/package-browser/](https://access.redhat.com/downloads/content/package-browser/)
- [https://access.redhat.com/security/cve/CVE-2025-13193](https://access.redhat.com/security/cve/CVE-2025-13193)
- [https://bugzilla.redhat.com/show_bug.cgi?id=2415409](https://bugzilla.redhat.com/show_bug.cgi?id=2415409)

## Related threats

- [Red Hat yggdrasil-worker-package-manager argument injection in APT backend](https://junglewise.ai/threats/cve-2026-18157-red-hat-yggdrasil-worker-package-manager-argument-injection-in)
- [Samba AD DC LDAP filter injection and ACL bypass in Compare requests](https://junglewise.ai/threats/cve-2026-58222-samba-ad-dc-ldap-filter-injection-and-acl-bypass-in-compare)
- [Samba KDC out-of-bounds read in kpasswd service](https://junglewise.ai/threats/cve-2026-58216-samba-kdc-out-of-bounds-read-in-kpasswd-service)
- [Samba internal DNS server denial of service via TKEY cache exhaustion](https://junglewise.ai/threats/cve-2026-58218-samba-internal-dns-server-denial-of-service-via-tkey-cache)
- [Red Hat PCP auth bypass in pmproxy /store endpoint](https://junglewise.ai/threats/cve-2026-16527-red-hat-pcp-auth-bypass-in-pmproxy-store-endpoint)