Orta CVSS 5.3 PoC var
CVE-2026-55686: Podman: güvenlik açığı
Açıklama (NVD)
Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an untrusted/malicious process that mutates the host filesystem tree during dereferencing of the WORKDIR path, to trigger a race condition. This vulnerability is fixed in 5.7.1.
Özet bilgiler
- Ürün
- Podman Project Podman
- CVSS v3.1
- 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - EPSS
- %0,40 (yüzdelik 35)
- CWE
- CWE-61
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| podman-project-podman | 3.0.0 | — | 5.7.1 |