RHSA-2026:13867HighCVSS 8.2

Red Hat Security Advisory: rh-podman-desktop security update

Published
May 5, 2026
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-34045 →

📋 Description

CVE-2026-34045 — podman-desktop: Podman Desktop: Denial of Service and Information Disclosure via unauthenticated HTTP server

🎯 Affected products3

  • Red Hat Enterprise Linux Extensions Channel (v. 10)
  • rh-podman-desktop-0:1.0.1-4.el10_1.src as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)
  • rh-podman-desktop-0:1.0.1-4.el10_1.x86_64 as a component of Red Hat Enterprise Linux Extensions Channel (v. 10)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Restrict network access to the system running Podman Desktop. Configure a firewall to block incoming connections to the ports used by Podman Desktop's unauthenticated HTTP server from untrusted networks. For example, using `firewall-cmd` on Red Hat Enterprise Linux: ```bash sudo firewall-cmd --permanent --add-rich-rule='rule family="ipv4" port port=<PORT_NUMBER> protocol="tcp" reject' sudo firewall-cmd --reload ``` Replace `<PORT_NUMBER>` with the actual port used by Podman Desktop. This mitigation limits the attack surface and prevents remote exploitation, but may impact the ability to remotely manage or interact with Podman Desktop.

🔗 References (6)