Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

CVE-2025-9566

Podman: podman kube play command may overwrite host files

HIGH 8.1

At a glance

Source
NVD
EPSS
EPSS 1.16 % · percentile 67 ()
State
PUBLISHED
Published
Updated
Assigner
redhat
NVD status
Deferred

Description

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

Weaknesses (CWE)

  • CWE-22 — Improper Limitation of a Pathname to a Restricted Directory

References

Scores

VersionScoreVectorScored by
CVSS 3.1HIGH 8.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Hredhat
CVSS 3.1HIGH 8.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HNVD · secalert@redhat.com (Secondary)

Advisories

European references

Affected products

ProductVersions
podmanaffected 4.0.0 < 5.6.1
Red Hat · Red Hat Enterprise Linux 10unaffected 6:5.4.0-13.el10_0 < *
Red Hat · Red Hat Enterprise Linux 10unaffected 7:5.6.0-5.el10_1 < *
Red Hat · Red Hat Enterprise Linux 10unaffected 7:5.8.0-2.el10 < *
Red Hat · Red Hat Enterprise Linux 8unaffected 8100020250911075811.afee755d < *
Red Hat · Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 8060020250919150821.3b538bd8 < *
Red Hat · Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 8060020250919150821.3b538bd8 < *
Red Hat · Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 8060020250919150821.3b538bd8 < *
Red Hat · Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 8080020250919060528.0f77c1b7 < *
Red Hat · Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 8080020250919060528.0f77c1b7 < *
Red Hat · Red Hat Enterprise Linux 9unaffected 5:5.4.0-13.el9_6 < *
Red Hat · Red Hat Enterprise Linux 9unaffected 6:5.6.0-6.el9_7 < *
Red Hat · Red Hat Enterprise Linux 9unaffected 6:5.8.0-1.el9 < *
Red Hat · Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 2:4.2.0-6.el9_0.5 < *
Red Hat · Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 2:4.4.1-22.el9_2.4 < *
Red Hat · Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 4:4.9.4-18.el9_4.3 < *
Red Hat · Red Hat OpenShift Container Platform 4.12unaffected 412.86.202510291903-0 < *
Red Hat · Red Hat OpenShift Container Platform 4.13unaffected 413.92.202510150118-0 < *
Red Hat · Red Hat OpenShift Container Platform 4.14unaffected 0:5.14.0-284.138.1.el9_2 < *
Red Hat · Red Hat OpenShift Container Platform 4.14unaffected 0:5.14.0-284.138.1.rt14.423.el9_2 < *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD