A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade podman | Jul 23, 2026 | Jul 23, 2026 |
| Redhat Openshift | — | Upgrade openshift-kuryrUpgrade buildahUpgrade runcUpgrade skopeoUpgrade podmanUpgrade containernetworking-pluginsUpgrade kernelUpgrade openshiftUpgrade openshift-clientsUpgrade rhcosUpgrade cri-oUpgrade conmonUpgrade openshift4-aws-isoUpgrade haproxyUpgrade kernel-rtUpgrade ignitionUpgrade cri-toolsUpgrade openshift-ansible | Aug 10, 2026 | Sep 16, 2025 |
| Rocky_linux | — | Upgrade libslirp-develUpgrade podman-catatonitUpgrade containers-commonUpgrade criu-debugsourceUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade buildah-tests-debuginfoUpgrade toolbox-debugsourceUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade criuUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade netavarkUpgrade podman-debugsourceUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade runcUpgrade criu-libsUpgrade runc-debuginfoUpgrade podmanUpgrade criu-libs-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade toolboxUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade critUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade podman-remoteUpgrade podman-debuginfoUpgrade slirp4netns-debugsourceUpgrade criu-debuginfoUpgrade criu-develUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade python3-criuUpgrade libslirpUpgrade podman-plugins-debuginfoUpgrade toolbox-testsUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debuginfoUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debugsourceUpgrade buildahUpgrade conmonUpgrade podman-gvproxyUpgrade runc-debugsourceUpgrade podman-tests | Feb 5, 2026 | Nov 29, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 2, 2026 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub