CVE-2025-9566

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.

Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9566.json",
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-22"
    ]
}

References

Affected packages

Git / github.com/podman-container-tools/podman

Affected ranges

Type

GIT

Repo

https://github.com/podman-container-tools/podman

Events

Introduced

84c8870ac236578c41713113fc09a29a5f727bdd

Fixed

1e2b2315150b2ffa0971596fb5da8cd83f3ce0e1

Fixed

43fbde4e665fe6cee6921868f04b7ccd3de5ad89

Database specific

{
    "extracted_events": [
        {
            "introduced": "4.0.0"
        },
        {
            "fixed": "5.6.1"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v0.*

v0.2

v0.2.1

v0.8.2

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-9566.json"