Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2025-9566

Podman: podman kube play command may overwrite host files

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

podman

Default version status: unaffected

  • 4.0.0 to < 5.6.1affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 6:5.4.0-13.el10_0 to < *unaffected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 7:5.6.0-5.el10_1 to < *unaffected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 7:5.8.0-2.el10 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 8100020250911075811.afee755d to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Default version status: affected

  • 8060020250919150821.3b538bd8 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Default version status: affected

  • 8060020250919150821.3b538bd8 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

Default version status: affected

  • 8060020250919150821.3b538bd8 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Default version status: affected

  • 8080020250919060528.0f77c1b7 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Default version status: affected

  • 8080020250919060528.0f77c1b7 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 5:5.4.0-13.el9_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 6:5.6.0-6.el9_7 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 6:5.8.0-1.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Default version status: affected

  • 2:4.2.0-6.el9_0.5 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Default version status: affected

  • 2:4.4.1-22.el9_2.4 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support

Default version status: affected

  • 4:4.9.4-18.el9_4.3 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.12

Default version status: affected

  • 412.86.202510291903-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.13

Default version status: affected

  • 413.92.202510150118-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.14

Default version status: affected

  • 0:5.14.0-284.138.1.el9_2 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.14

Default version status: affected

  • 0:5.14.0-284.138.1.rt14.423.el9_2 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.14

Default version status: affected

  • 3:4.4.1-23.rhaos4.14.el8 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.14

Default version status: affected

  • 414.92.202510211419-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.15

Default version status: affected

  • 0:5.14.0-284.138.1.el9_2 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.15

Default version status: affected

  • 0:5.14.0-284.138.1.rt14.423.el9_2 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.15

Default version status: affected

  • 3:4.4.1-35.rhaos4.15.el8 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.15

Default version status: affected

  • 415.92.202609140326-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.16

Default version status: affected

  • 416.94.202609011112-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.17

Default version status: affected

  • 417.94.202510112152-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.18

Default version status: affected

  • 4:2.237.0-1.rhaos4.18.el9 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.18

Default version status: affected

  • 0:1.31.12-3.rhaos4.18.gitdc59c78.el8 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.18

Default version status: affected

  • 0:5.14.0-427.87.1.el9_4 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.18

Default version status: affected

  • 0:4.18.0-202509090932.p2.ga4cad44.assembly.stream.el8 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.18

Default version status: affected

  • 0:4.18.0-202509011551.p2.g018e43a.assembly.stream.el8 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.18

Default version status: affected

  • 5:5.2.2-11.rhaos4.18.el9 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.18

Default version status: affected

  • 418.94.202510230424-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.19

Default version status: affected

  • 4:2.237.0-1.rhaos4.19.el9 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.19

Default version status: affected

  • 0:1.32.8-3.rhaos4.19.git60d4e21.el9 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.19

Default version status: affected

  • 0:4.19.0-202509070341.p2.gb5229e8.assembly.stream.el9 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.19

Default version status: affected

  • 5:5.4.0-7.rhaos4.19.el9 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.19

Default version status: affected

  • 4.19.9.6.202510140714-0 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.20

Default version status: affected

  • 5:5.4.0-12.rhaos4.20.el9 to < *unaffected

Red Hat Red Hat OpenShift Container Platform 4.20

Default version status: affected

  • 4.20.9.6.202510220229-0 to < *unaffected

Red Hat Red Hat Hardened Images

Default version status: affected

  • 5.8.2-1.hum1 to < *unaffected

Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.24

Default version status: affected

  • 3.24-1760921292 to < *unaffected

Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.24

Default version status: affected

  • 3.24-1761160160 to < *unaffected

References