Vulnerability details
CVE-2025-4953
Podman: build context bind mount
CVSS 3.1
7.4High
Official description
A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.4High | 3.1 | CVEProject cvelistV5 (CNA) (redhat) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| No product information recorded. | |||
References and advisories
16- https://access.redhat.com/errata/RHSA-2024:8690 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:15904 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:16724 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:16729 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:17669 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:22265 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:22275 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:22695 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:22724 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:22732 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:23113 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2025:2703 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:0316 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2025-4953 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2367235 issue-trackingx_refsource_REDHAT
- https://github.com/containers/podman/pull/25173
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-09-16
- Last updated
- 2026-11-05
- State
- Published
- Assigner (CNA)
- redhat
Exploit prediction (EPSS)
0.63%
Probability of exploitation in 30 days
50.7%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-378Creation of Temporary File With Insecure Permissions