There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.
Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-remoteUpgrade python3-criuUpgrade crunUpgrade podman-pluginsUpgrade criu-develUpgrade container-selinuxUpgrade runcUpgrade podman-dockerUpgrade libslirp-develUpgrade skopeo-testsUpgrade udicaUpgrade critUpgrade containernetworking-pluginsUpgrade podman-testsUpgrade criu-libsUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade buildahUpgrade python3-podmanUpgrade libslirpUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade podmanUpgrade slirp4netnsUpgrade toolboxUpgrade podman-catatonitUpgrade containers-commonUpgrade conmonUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade netavark | Sep 18, 2025 | Sep 16, 2025 |
| Alpine Linux | — | Upgrade podman | Sep 8, 2025 | Sep 5, 2025 |
| Oracle_linux | — | Upgrade containers-commonUpgrade slirp4netnsUpgrade criu-libsUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade podman-dockerUpgrade python3-criuUpgrade podman-testsUpgrade skopeo-testsUpgrade libslirp-develUpgrade libslirpUpgrade podman-remoteUpgrade cockpit-podmanUpgrade criu-develUpgrade container-selinuxUpgrade critUpgrade podman-gvproxyUpgrade buildah-testsUpgrade criuUpgrade python3-podmanUpgrade netavarkUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade udicaUpgrade skopeoUpgrade runcUpgrade buildahUpgrade crunUpgrade containernetworking-pluginsUpgrade podmanUpgrade conmonUpgrade podman-plugins | Sep 18, 2025 | Sep 4, 2025 |
| Redhat Openshift | — | Upgrade openshiftUpgrade kernel-rtUpgrade podmanUpgrade rhcosUpgrade kernelUpgrade cri-oUpgrade openshift-ansibleUpgrade container-selinux | Aug 10, 2026 | Sep 4, 2025 |
| Redhat_linux | — | Upgrade buildah-testsUpgrade python3-podmanUpgrade criuUpgrade criu-libsUpgrade criu-debuginfoUpgrade toolbox-testsUpgrade conmon-debugsourceUpgrade libslirp-develUpgrade runc-debugsourceUpgrade containernetworking-pluginsUpgrade conmon-debuginfoUpgrade containers-commonUpgrade aardvark-dnsUpgrade netavarkUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade buildah-debuginfoUpgrade crun-debugsourceUpgrade buildah-tests-debuginfoUpgrade podmanUpgrade cockpit-podmanUpgrade criu-debugsourceUpgrade crun-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade udicaUpgrade podman-pluginsUpgrade podman-tests-debuginfoUpgrade toolbox-debuginfoUpgrade libslirpUpgrade podman-catatonit-debuginfoUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-gvproxyUpgrade container-selinuxUpgrade critUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade conmonUpgrade toolbox-debugsourceUpgrade skopeo-testsUpgrade podman-testsUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runcUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeoUpgrade crunUpgrade slirp4netnsUpgrade toolboxUpgrade podman-debuginfoUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade libslirp-debugsourceUpgrade podman-dockerUpgrade libslirp-debuginfoUpgrade python3-criu | Sep 17, 2025 | Sep 4, 2025 |
| Rocky_linux | — | Upgrade criuUpgrade buildah-tests-debuginfoUpgrade toolbox-testsUpgrade buildahUpgrade containers-commonUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade libslirp-debuginfoUpgrade criu-debuginfoUpgrade podman-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-catatonitUpgrade podman-remoteUpgrade libslirp-develUpgrade python3-criuUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade runcUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade conmon-debuginfoUpgrade podman-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade skopeo-testsUpgrade skopeoUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolbox-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade buildah-debugsourceUpgrade criu-develUpgrade netavarkUpgrade libslirp-debugsourceUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade podman-testsUpgrade conmonUpgrade containernetworking-plugins-debuginfoUpgrade libslirpUpgrade crit | Feb 5, 2026 | Nov 29, 2025 |
| Suse | — | Upgrade podmanshUpgrade podman-remoteUpgrade podmanUpgrade podman-docker | Dec 5, 2025 | Sep 17, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Sep 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub