Log in / Sign up

Vulnerability details

CVE-2025-9566

Podman: podman kube play command may overwrite host files

CVSS 3.1
8.1High

Official description

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

CVSS scores

ScoreVersionSourceVector
8.1High 3.1 CVEProject cvelistV5 (CNA) (redhat) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected products

VendorProductVersionsSource
No product information recorded.

References and advisories

36
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2025-09-05
Last updated
2026-11-03
State
Published
Assigner (CNA)
redhat

Exploit prediction (EPSS)

1.2%
Probability of exploitation in 30 days
68.4%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Partial

Weaknesses (CWE)

  • CWE-22
    Improper Limitation of a Pathname to a Restricted Directory