Directory Traversal The advisory has been revoked - it doesn't affect any version of package podman (opens in a new tab)

Threat Intelligence

1.08% (62^nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-RHEL8-PODMAN-12508437
published5 Sept 2025
disclosed4 Sept 2025

Report a new vulnerability Found a mistake?

Introduced: 4 Sep 2025

CVE-2025-9566 (opens in a new tab) CWE-22 (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:8.

NVD Description

Note: Versions mentioned in the description apply only to the upstream podman package and not the podman package as distributed by RHEL.

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.

Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1