Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-4953GHSA-M68Q-4HQR-MC6FGO-2025-3961

Podman: build context bind mount

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • podman

    fixed in *

  • container-tools:rhel8

    Version range not reported

  • podman

    Version range not reported

  • openshift/ose-rhel-coreos-8

    Version range not reported

  • buildah

    Version range not reported

  • conmon

    Version range not reported

  • containernetworking-plugins

    Version range not reported

  • cri-o

    Version range not reported

  • cri-tools

    Version range not reported

  • haproxy

    Version range not reported

  • ignition

    Version range not reported

  • openshift

    Version range not reported

  • openshift4-aws-iso

    Version range not reported

  • openshift-ansible

    Version range not reported

  • openshift-clients

    Version range not reported

  • openshift-kuryr

    Version range not reported

  • podman

    Version range not reported

  • runc

    Version range not reported

  • skopeo

    Version range not reported

  • kernel

    Version range not reported

  • kernel-rt

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • podman

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • podman

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • podman

    Version range not reported

  • podman

    Version range not reported

  • github.com/containers/podman/v5Go

    through 5.5.0

  • github.com/containers/podmanGo

    All versions

  • github.com/containers/podman/v2Go

    All versions

  • github.com/containers/podman/v3Go

    All versions

  • github.com/containers/podman/v4Go

    All versions

  • github.com/containers/podman/v5Go

    All versions

References 16

access.redhat.com

bugzilla.redhat.com

GitHub · containers/podman