Podman Project Podman vulnerabilities

• containers podman Podman: Malformed Image can trick podman run into leaking host environment variables into the container CVE-2026-57231 Fix available 7.5 HighJune 26, 2026
• containers podman Podman: WORKDIR symlink traversal vulnerability CVE-2026-55686 Fix available 5.3 MediumJune 18, 2026
• containers podman, red hat enterprise linux 10, enterprise linux 8 +3 more +5 more PowerShell Command Injection in Podman HyperV Machine CVE-2026-33414 Fix available 4.0 MediumApril 14, 2026
• podman project podman, fedoraproject fedora, red hat enterprise linux 10 +7 more +9 more Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack CVE-2024-3056 Fix available 7.7 HighAugust 2, 2024
• containers podman, redhat enterprise linux +1 more Podman Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2023-0778 Fix available 6.8 MediumMarch 27, 2023
• containers podman, fedoraproject fedora +1 more Buildah (as part of Podman) vulnerable to Path Traversal CVE-2022-4123 Fix available 3.3 LowDecember 8, 2022
• containers podman, fedoraproject fedora +1 more Buildah (as part of Podman) vulnerable to Link Following CVE-2022-4122 Fix available 5.3 MediumDecember 8, 2022
• containers podman, redhat enterprise linux, openshift container platform +2 more Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification CVE-2022-2989 Fix available 7.1 HighSeptember 13, 2022
• containers podman, redhat enterprise linux server, enterprise linux workstation +2 more The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190... CVE-2022-2739 5.3 MediumSeptember 1, 2022
• containers podman, redhat enterprise linux server, enterprise linux workstation +2 more The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190... CVE-2022-2738 7.5 HighSeptember 1, 2022
• containers podman, varlink +1 more Podman/Varlink API Privilege Escalation CVE-2019-25067 Fix available 6.3 MediumJune 9, 2022
• podman project podman, fedoraproject fedora, psgo project psgo +13 more +15 more Podman publishes a malicious image to public registries CVE-2022-1227 Public exploitFix available 8.8 HighApril 29, 2022
• containers podman, fedoraproject fedora, redhat developer tools +11 more +13 more Podman's default inheritable capabilities for linux container not empty CVE-2022-27649 Fix available 7.5 HighApril 1, 2022
• containers podman, fedoraproject fedora, redhat enterprise linux +2 more Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman CVE-2021-4024 Fix available 6.5 MediumDecember 23, 2021
• containers podman Podman Origin Validation Error CVE-2021-20199 Fix available 5.9 MediumFebruary 2, 2021
• containers podman, fedoraproject fedora, redhat enterprise linux +1 more +3 more Information disclosure in podman CVE-2020-14370 Fix available 5.3 MediumSeptember 23, 2020
• containers podman, redhat enterprise linux, openshift container platform +2 more Improper Authorization in github.com/containers/libpod CVE-2021-20188 Fix available 7.0 HighJuly 21, 2020