CVE-2025-9566
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1
- CVSS 3.1
- 8.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H - EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-25)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-wp3j-xq48-xpjw | Go | github.com/containers/podman/v5 | <5.6.1 | 5.6.1 |
| GHSA-wp3j-xq48-xpjw | Go | github.com/containers/podman/v4 | <=4.9.5 | no fix published |
| GO-2025-3935 | Go | github.com/containers/podman | all versions | no fix published |
| GO-2025-3935 | Go | github.com/containers/podman/v2 | all versions | no fix published |
| GO-2025-3935 | Go | github.com/containers/podman/v3 | all versions | no fix published |
| GO-2025-3935 | Go | github.com/containers/podman/v4 | all versions | no fix published |
| GO-2025-3935 | Go | github.com/containers/podman/v5 | <5.6.1 | 5.6.1 |