There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.
Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-criuUpgrade podman-remoteUpgrade container-selinuxUpgrade udicaUpgrade skopeo-testsUpgrade critUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade podman-dockerUpgrade criu-develUpgrade libslirp-develUpgrade podman-testsUpgrade crunUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade toolboxUpgrade podman-catatonitUpgrade python3-podmanUpgrade buildahUpgrade toolbox-testsUpgrade skopeoUpgrade containers-commonUpgrade fuse-overlayfsUpgrade netavarkUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade libslirpUpgrade podmanUpgrade buildah-testsUpgrade podman-gvproxyUpgrade conmonUpgrade criu-libsUpgrade aardvark-dnsUpgrade criu | Sep 18, 2025 | Sep 16, 2025 |
| Alpine Linux | — | Upgrade podman | Sep 8, 2025 | Sep 5, 2025 |
| Oracle_linux | — | Upgrade crunUpgrade containernetworking-pluginsUpgrade runcUpgrade podman-catatonitUpgrade python3-podmanUpgrade skopeoUpgrade podmanUpgrade conmonUpgrade criuUpgrade podman-pluginsUpgrade buildahUpgrade netavarkUpgrade udicaUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade container-selinuxUpgrade podman-dockerUpgrade criu-develUpgrade podman-gvproxyUpgrade critUpgrade podman-testsUpgrade containers-commonUpgrade python3-criuUpgrade podman-remoteUpgrade cockpit-podmanUpgrade buildah-testsUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade skopeo-testsUpgrade libslirp-develUpgrade libslirp | Sep 18, 2025 | Sep 4, 2025 |
| Redhat Openshift | — | Upgrade podmanUpgrade kernel-rtUpgrade openshiftUpgrade openshift-ansibleUpgrade cri-oUpgrade rhcosUpgrade container-selinuxUpgrade kernel | Aug 10, 2026 | Sep 4, 2025 |
| Redhat_linux | — | Upgrade crun-debugsourceUpgrade aardvark-dnsUpgrade cockpit-podmanUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade criu-libsUpgrade podmanUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade crun-debuginfoUpgrade buildah-debuginfoUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade conmon-debugsourceUpgrade netavarkUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade podman-catatonitUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debuginfoUpgrade libslirp-develUpgrade buildahUpgrade containers-commonUpgrade toolbox-testsUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-develUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade conmonUpgrade toolbox-debugsourceUpgrade podman-testsUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade runc-debuginfoUpgrade podman-gvproxyUpgrade critUpgrade container-selinuxUpgrade libslirp-debuginfoUpgrade buildah-debugsourceUpgrade libslirp-debugsourceUpgrade podman-dockerUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade udicaUpgrade skopeoUpgrade podman-pluginsUpgrade crunUpgrade toolboxUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade libslirpUpgrade podman-catatonit-debuginfoUpgrade podman-debugsourceUpgrade slirp4netnsUpgrade criu-libs-debuginfoUpgrade runcUpgrade slirp4netns-debugsourceUpgrade podman-tests-debuginfo | Sep 17, 2025 | Sep 4, 2025 |
| Rocky_linux | — | Upgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade buildah-testsUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade toolbox-testsUpgrade runcUpgrade buildah-debuginfoUpgrade containers-commonUpgrade podman-plugins-debuginfoUpgrade podman-remoteUpgrade buildah-tests-debuginfoUpgrade python3-criuUpgrade runc-debugsourceUpgrade libslirp-develUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade criuUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade criu-libsUpgrade conmon-debuginfoUpgrade libslirp-debuginfoUpgrade runc-debuginfoUpgrade podman-testsUpgrade podman-gvproxyUpgrade podman-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade netavarkUpgrade libslirp-debugsourceUpgrade critUpgrade criu-libs-debuginfoUpgrade conmonUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirpUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade toolbox-debugsourceUpgrade podmanUpgrade crun-debuginfoUpgrade slirp4netns-debuginfoUpgrade slirp4netnsUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade toolboxUpgrade skopeo-testsUpgrade skopeoUpgrade podman-debugsourceUpgrade podman-plugins | Feb 5, 2026 | Nov 29, 2025 |
| Suse | — | Upgrade podman-remoteUpgrade podmanshUpgrade podman-dockerUpgrade podman | Dec 5, 2025 | Sep 17, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Sep 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub