GHSA-6jv9-mhj9-v2h4MediumCVSS 5.5
A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load`...
🔗 CVE IDs covered (1)
📋 Description
A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman.
🔗 References (12)
- https://nvd.nist.gov/vuln/detail/CVE-2025-11395
- https://access.redhat.com/security/cve/CVE-2025-11395
- https://bugzilla.redhat.com/show_bug.cgi?id=2402034
- https://access.redhat.com/errata/RHSA-2026:70641
- https://access.redhat.com/errata/RHSA-2026:70640
- https://access.redhat.com/errata/RHSA-2026:88262
- https://access.redhat.com/errata/RHSA-2026:89761
- https://access.redhat.com/errata/RHSA-2026:90362
- https://access.redhat.com/errata/RHSA-2026:90424
- https://access.redhat.com/errata/RHSA-2026:90462
- https://access.redhat.com/errata/RHSA-2026:93464
- https://github.com/advisories/GHSA-6jv9-mhj9-v2h4