Subject: PSA-2026-00073-1: pvedaemon denial-of-service via QEMU guest agent file-read command
Advisory date: 2026-10-19
Packages: qemu-server
Details:
Insufficient hardening of the QEMU guest agent file-read handling allowed a malicious guest agent implementation in a VM to cause pvedaemon to allocate additional memory until it triggers an out-of-memory kill action by the kernel.
Subject: PSA-2026-00074-1: QEMU HMP: incomplete permissions checks for gpa2hpa/gpa2hva/i commands
Advisory date: 2026-10-19
Packages: qemu-server
Details:
The gpa2hpa/gpa2hva/i of QEMU's HMP interface were only requiring Sys.Modify privileges, instead of being restricted to root. These commands potentially allow leaking information about the memory layout of the QEMU process, or read memory from I/O ports, which might have security implications.
Subject: PSA-2026-00075-1: Missing validation of xterm.js URL parameters
Advisory date: 2026-10-30
Packages: pve-xtermjs
Details:
Missing validation of URL parameters in the xterm.js console page allows an attacker to trigger almost arbitrary POST requests as another user, if they can trick them into opening a malicious crafted link.
Subject: PSA-2026-00077-1: Missing validation of network configuration fields
Advisory date: 2026-10-30
Packages: libpve-common-perl, pve-manager
Details:
Some fields/options in the network configuration /etc/network/interfaces which are exposed over the network configuration API were lacking validation, allowing the injection of arbitrary lines in the generated configuration file.
Since some network configuration options allow executing arbitrary commands as root during boot or network settings reload tasks, this effectively is a root privilege escalation which can be triggered by users/tokens with Sys.Modify privileges on /nodes/{node}.
Subject: PSA-2026-00078-1: XSS in consent-text datacenter option
Advisory date: 2026-10-30
Packages: pve-manager, libpve-cluster-perl
Details:
An incomplete definition of the consent-text field in the datacenter configuration schema allowed a highly privileged attacker to inject arbitrary content into the web UI index template.
Subject: PSA-2026-00079-1: Missing shell quoting for ceph install command options
Advisory date: 2026-10-30
Packages: pve-manager
Details:
Missing shell quoting for parameters passed to termproxy while handling xtermjs API requests allowed an attacker to execute arbitrary commands as root, if they managed to trick a user logged in as root@pam into opening a crafted URL containing such parameters.
