CVE-2013-4400: virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibl...

Security readout for executives and security teams

This is a local libvirt vulnerability in virt-login-shell. A user who already has local access to an affected host could overwrite files and may gain higher privileges. It is most relevant on shared virtualization servers or systems exposing shell access to less-trusted users. Exposure is likely limited to systems running libvirt 1.1.2 or 1.1.3 with virt-login-shell available to local users. Treat this as a patching priority for shared or multi-user virtualization infrastructure. For tightly controlled single-admin systems, schedule through normal vulnerability remediation. There is no provided evidence of active exploitation. Mitigation focus: Inventory hosts running libvirt 1.1.2 or 1.1.3.; Apply vendor libvirt security updates from your supported distribution.; Upgrade away from affected libvirt maintenance releases where vendor guidance confirms the fix..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.