There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.
Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade udicaUpgrade container-selinuxUpgrade crunUpgrade criu-develUpgrade critUpgrade podman-testsUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade libslirp-develUpgrade runcUpgrade skopeo-testsUpgrade podman-pluginsUpgrade podman-dockerUpgrade python3-criuUpgrade buildah-testsUpgrade cockpit-podmanUpgrade podmanUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade conmonUpgrade buildahUpgrade python3-podmanUpgrade criu-libsUpgrade netavarkUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade libslirpUpgrade slirp4netnsUpgrade skopeoUpgrade containers-commonUpgrade podman-catatonitUpgrade toolboxUpgrade criu | Sep 18, 2025 | Sep 16, 2025 |
| Alpine Linux | — | Upgrade podman | Sep 8, 2025 | Sep 5, 2025 |
| Oracle_linux | — | Upgrade python3-podmanUpgrade netavarkUpgrade podmanUpgrade conmonUpgrade fuse-overlayfsUpgrade crunUpgrade containernetworking-pluginsUpgrade buildahUpgrade runcUpgrade podman-pluginsUpgrade podman-catatonitUpgrade udicaUpgrade skopeoUpgrade criuUpgrade skopeo-testsUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade criu-develUpgrade container-selinuxUpgrade podman-dockerUpgrade podman-remoteUpgrade cockpit-podmanUpgrade containers-commonUpgrade podman-testsUpgrade buildah-testsUpgrade libslirpUpgrade libslirp-develUpgrade slirp4netnsUpgrade python3-criuUpgrade critUpgrade criu-libsUpgrade oci-seccomp-bpf-hook | Sep 18, 2025 | Sep 4, 2025 |
| Redhat Openshift | — | Upgrade container-selinuxUpgrade rhcosUpgrade cri-oUpgrade openshift-ansibleUpgrade kernelUpgrade podmanUpgrade kernel-rtUpgrade openshift | Aug 10, 2026 | Sep 4, 2025 |
| Redhat_linux | — | Upgrade cockpit-podmanUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade python3-podmanUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade containers-commonUpgrade criu-debuginfoUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade criu-libsUpgrade buildahUpgrade conmon-debugsourceUpgrade libslirp-develUpgrade crun-debuginfoUpgrade criu-debugsourceUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade skopeoUpgrade toolbox-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade crunUpgrade runcUpgrade podman-remote-debuginfoUpgrade toolboxUpgrade udicaUpgrade slirp4netnsUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade container-selinuxUpgrade podman-gvproxyUpgrade podman-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-dockerUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade podman-debugsourceUpgrade podman-testsUpgrade conmonUpgrade podman-remoteUpgrade slirp4netns-debugsourceUpgrade python3-criuUpgrade podman-tests-debuginfoUpgrade criu-develUpgrade podman-catatonit-debuginfoUpgrade libslirpUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsource | Sep 17, 2025 | Sep 4, 2025 |
| Rocky_linux | — | Upgrade podman-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade toolbox-debugsourceUpgrade podmanUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade crun-debuginfoUpgrade skopeoUpgrade toolbox-debuginfoUpgrade podman-debugsourceUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade criu-libs-debuginfoUpgrade crunUpgrade runc-debuginfoUpgrade podman-gvproxyUpgrade libslirpUpgrade podman-pluginsUpgrade toolboxUpgrade podman-testsUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade critUpgrade libslirp-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade slirp4netnsUpgrade conmonUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remote-debuginfoUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade conmon-debugsourceUpgrade conmon-debuginfoUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade podman-catatonitUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade buildahUpgrade toolbox-testsUpgrade buildah-debuginfoUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade containers-commonUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade criu-debuginfoUpgrade libslirp-develUpgrade runc-debugsource | Feb 5, 2026 | Nov 29, 2025 |
| Suse | — | Upgrade podmanUpgrade podman-dockerUpgrade podman-remoteUpgrade podmansh | Dec 5, 2025 | Sep 17, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Sep 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub