Homepage

Directory Traversal The advisory has been revoked - it doesn't affect any version of package openshift-ansible-test  (opens in a new tab)

Threat Intelligence

EPSS
1.01% (59th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL8-OPENSHIFTANSIBLETEST-17098332
  • published30 May 2026
  • disclosed4 Sept 2025
Report a new vulnerability Found a mistake?

Introduced: 4 Sep 2025

CVE-2025-9566  (opens in a new tab)
CWE-22  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:8.

NVD Description

Note: Versions mentioned in the description apply only to the upstream openshift-ansible-test package and not the openshift-ansible-test package as distributed by RHEL.

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.

Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1