CVE-2012-2690: virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves th...

Security readout for executives and security teams

This vulnerability affects virt-edit in libguestfs before 1.18.0. When an administrator edited a file inside a guest image, the tool could save it as world-readable, exposing sensitive content to local users inside that guest. Business impact depends on whether virt-edit touched secrets, configuration files, or credentials in multi-user virtual machines. Exposure is most likely where teams used libguestfs virt-edit before 1.18.0 to modify guest VM or disk-image files, especially sensitive configuration or credential files. Systems with untrusted or multiple local guest users carry higher risk. Prioritize remediation where virtualization administrators used virt-edit on sensitive guest files or shared guest environments. This is not flagged as actively exploited, but it can expose secrets if vulnerable tooling was used operationally. Mitigation focus: Upgrade libguestfs to 1.18.0 or a vendor-fixed package.; Review Red Hat RHSA-2012:0774 and applicable distribution advisories.; Restrict virt-edit use on sensitive guest files until fixed..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.