CVE-2025-9566Podman: podman kube play command may overwrite host files
Updated under an hour ago ()
Does this affect you?
It affects Red Hat Enterprise Linux 10 and 8 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1
- CVSS
- 8.1 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- Weakness (CWE)
- CWE-22
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- redhat
- NVD analysis
- Deferred
- Record last updated
- Oct 8, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Red Hat Red Hat Enterprise Linux 10 redhat:enterprise_linux | from 6:5.4.0-13.el10_0 not affected | CNA record |
from 8060020250919150821.3b538bd8 not affected | CNA record | |
from 8060020250919150821.3b538bd8 not affected | CNA record | |
from 8060020250919150821.3b538bd8 not affected | CNA record | |
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support redhat:rhel_eus | from 4:4.9.4-18.el9_4.3 not affected | CNA record |
Red Hat Red Hat OpenShift Container Platform 4.12 redhat:openshift | from 412.86.202510291903-0 not affected | CNA record |
Red Hat Red Hat OpenShift Container Platform 4.20 redhat:openshift_ironic | from 5:5.4.0-12.rhaos4.20.el9 not affected | CNA record |
Red Hat Red Hat Hardened Images redhat:hummingbird | from 5.8.2-1.hum1 not affected | CNA record |
Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.24 redhat:openshift_devspaces | from 3.24-1760921292 not affected | CNA record |
References
- https://access.redhat.com/errata/RHBA-2025:15692vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHBA-2025:15712vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHBA-2025:16158vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHBA-2025:16163vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHEA-2025:4782vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:15900vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:15901vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:15904vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:16480vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:16481vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:16482vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:16488vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:16515vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:16724vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:17669vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:18217vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:18218vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:18240vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:19002vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:19041vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:19046vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:19094vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:19894vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:20909vendor-advisory, x-refsource-redhat
- https://access.redhat.com/errata/RHSA-2025:20983vendor-advisory, x-refsource-redhat
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.