fakefish: KubeVirt backend ignores Redfish credentials, exposing VM power and virtual media

Impact

fakefish presents a Redfish BMC interface in front of hardware that does not have a usable one, and passes the credentials it receives down to backend scripts on the assumption that a real BMC will validate them. The KubeVirt backend does not: it acts through a KUBECONFIG mounted into the container and ignores the supplied credentials completely. Anyone who can reach the fakefish endpoint therefore inherits the permissions of whoever deployed it, over the VMs that identity controls - power them on and off, and mount an arbitrary CD image. Mounting attacker-chosen boot media on a machine you can also power-cycle is a provisioning-layer compromise of the guest OS, which in a bare-metal-as-a-service GPU fleet is exactly the interface used to hand nodes between tenants.

Who can reach it

Any cluster user, or anyone else with network reach to the fakefish Redfish listener. Credentials are accepted by the interface but never checked against anything on the KubeVirt path, so this is effectively unauthenticated access to VM power control and virtual media.

What to do

The record carries only the GitHub security advisory and names no fixed version, so do not assume a released patch exists - check GHSA-qpfr-jqjq-v83w for current status before planning a window. In the meantime, restrict network access to the fakefish endpoint to the provisioning controller alone, and cut the mounted KUBECONFIG down to a dedicated service account scoped to just the VMs that instance is meant to drive, so an unauthenticated caller cannot reach beyond them. Remediation here is a redeploy of the fakefish pod, not a node action.

References

Related entries

• Linux kernel (drivers/infiniband/hw/bnxt_re): A user context could request the write-combine doorbell page repeatedlyCVE-2026-72495 · Linux kernel (drivers/infiniband/hw/bnxt_re)Critical
• Phison PS3111-S11 SSD firmware: signature check trusts a modulus carried in the image, so any firmware verifiesCVE-2026-82876 · Phison PS3111-S11 SSD controller firmware (signature verification root of trust)Critical
• Phison PS3111-S11 SSD firmware: vendor unique commands allow persistent implants in controller flashCVE-2026-84696 · Phison PS3111-S11 SSD controller firmware (vendor unique commands over ATA)Critical
• Tripp Lite PDUMH15AT / SU750XL PDU: The PDU accepts unauthenticated POST requests to its /Forms/ endpoints, which canCVE-2019-16261 · Tripp Lite PDUMH15AT / SU750XL PDUCritical
• IBM OpenPower firmware OP910/OP920 - OpenBMC IPMI credential handling: The original default BMC password kept workingCVE-2019-4169 · IBM OpenPower firmware OP910/OP920 - OpenBMC IPMI credential handlingCritical
• Lanner IAC-AST2500A BMC firmware: An authenticated BMC user escalates to root code execution on the controllerCVE-2021-26731 · Lanner IAC-AST2500A BMC firmwareCritical