Search
Find a vulnerability
Search criteria
3 vulnerabilities found for podman by podman-container-tools
CVE-2026-94603 (GCVE-0-2026-94603)
Vulnerability from nvd – Published: 2026-10-13 16:51 – Updated: 2026-10-13 20:21
VLAI
EPSS
VEX
Title
Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation
Summary
Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.
Severity
10 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 20:19 UTC
CWE
- CWE-693 - Protection Mechanism Failure
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/podman-container-tools/podman/… | x_refsource_CONFIRM |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| podman-container-tools | podman |
Affected:
>= 4.4.0, < 5.8.8
Affected: >= 6.0.0, < 6.1.3 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-94603",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T20:19:31.021516Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T20:21:43.627Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "podman",
"vendor": "podman-container-tools",
"versions": [
{
"status": "affected",
"version": "\u003e= 4.4.0, \u003c 5.8.8"
},
{
"status": "affected",
"version": "\u003e= 6.0.0, \u003c 6.1.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-693",
"description": "CWE-693: Protection Mechanism Failure",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T16:51:38.731Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g"
},
{
"name": "https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92"
},
{
"name": "https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669"
},
{
"name": "https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c"
},
{
"name": "https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616"
},
{
"name": "https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627"
},
{
"name": "https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02"
},
{
"name": "https://github.com/podman-container-tools/podman/releases/tag/v5.8.8",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/releases/tag/v5.8.8"
},
{
"name": "https://github.com/podman-container-tools/podman/releases/tag/v6.1.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/releases/tag/v6.1.3"
}
],
"source": {
"advisory": "GHSA-2cvf-wqm6-wr9g",
"discovery": "UNKNOWN"
},
"title": "Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-94603",
"datePublished": "2026-10-13T16:51:38.731Z",
"dateReserved": "2026-09-21T21:32:23.740Z",
"dateUpdated": "2026-10-13T20:21:43.627Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-57231 (GCVE-0-2026-57231)
Vulnerability from nvd – Published: 2026-06-26 16:29 – Updated: 2026-06-27 02:41
VLAI
EPSS
VEX
Title
Podman: Malformed Image can trick podman run into leaking host environment variables into the container
Summary
Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-27 02:41 UTC
CWE
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/podman-container-tools/podman/… | x_refsource_CONFIRM |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| podman-container-tools | podman |
Affected:
>= 1.8.1, < 5.8.4
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-57231",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-27T02:41:47.348825Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-27T02:41:58.574Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "podman",
"vendor": "podman-container-tools",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.8.1, \u003c 5.8.4"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-668",
"description": "CWE-668: Exposure of Resource to Wrong Sphere",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-26T16:29:02.092Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-4hq8-gpf5-8p68",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-4hq8-gpf5-8p68"
},
{
"name": "https://github.com/podman-container-tools/podman/commit/6c431b73dbf8e4b20b778644d7a80caebdb75050",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/commit/6c431b73dbf8e4b20b778644d7a80caebdb75050"
}
],
"source": {
"advisory": "GHSA-4hq8-gpf5-8p68",
"discovery": "UNKNOWN"
},
"title": "Podman: Malformed Image can trick podman run into leaking host environment variables into the container"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-57231",
"datePublished": "2026-06-26T16:29:02.092Z",
"dateReserved": "2026-06-24T02:21:33.811Z",
"dateUpdated": "2026-06-27T02:41:58.574Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-55686 (GCVE-0-2026-55686)
Vulnerability from nvd – Published: 2026-06-26 16:30 – Updated: 2026-06-26 18:31
VLAI
EPSS
VEX
Title
Podman: WORKDIR symlink traversal vulnerability
Summary
Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an untrusted/malicious process that mutates the host filesystem tree during dereferencing of the WORKDIR path, to trigger a race condition. This vulnerability is fixed in 5.7.1.
Severity
5.3 (Medium)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-26 18:31 UTC
CWE
- CWE-61 - UNIX Symbolic Link (Symlink) Following
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/podman-container-tools/podman/… | x_refsource_CONFIRM |
| https://github.com/podman-container-tools/podman/… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| podman-container-tools | podman |
Affected:
>= 3.0.0, < 5.7.1
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-55686",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-26T18:31:12.071003Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-26T18:31:36.842Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-q6r4-3wmg-fwcq"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "podman",
"vendor": "podman-container-tools",
"versions": [
{
"status": "affected",
"version": "\u003e= 3.0.0, \u003c 5.7.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an untrusted/malicious process that mutates the host filesystem tree during dereferencing of the WORKDIR path, to trigger a race condition. This vulnerability is fixed in 5.7.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-61",
"description": "CWE-61: UNIX Symbolic Link (Symlink) Following",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-26T16:30:41.345Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-q6r4-3wmg-fwcq",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-q6r4-3wmg-fwcq"
},
{
"name": "https://github.com/podman-container-tools/podman/commit/d18e44e9abb3bf5b7294aa70806e1368fdddfdd0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/podman-container-tools/podman/commit/d18e44e9abb3bf5b7294aa70806e1368fdddfdd0"
}
],
"source": {
"advisory": "GHSA-q6r4-3wmg-fwcq",
"discovery": "UNKNOWN"
},
"title": "Podman: WORKDIR symlink traversal vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-55686",
"datePublished": "2026-06-26T16:30:41.345Z",
"dateReserved": "2026-06-17T00:13:10.650Z",
"dateUpdated": "2026-06-26T18:31:36.842Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}