CVE-2025-9566HIGH 8.1EPSS p58.5%
CVE-2025-9566CVE-2025-9566
Description
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.
Binary-Affected: podman
Upstream-version-introduced: v4.0.0
Upstream-version-fixed: v5.6.1
Scoring
| CVSS 3.1 | 8.1 (HIGH) |
| Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H |
| EPSS | 1.01% probability of exploitation · percentile 58.5% · 2026-06-19T12:03:05Z |
| Published | 2025-09-05 |
| Last modified | 2026-05-19 |
Underlying weaknesses· 1
References
- https://access.redhat.com/errata/RHBA-2025:15692
- https://access.redhat.com/errata/RHBA-2025:15712
- https://access.redhat.com/errata/RHBA-2025:16158
- https://access.redhat.com/errata/RHBA-2025:16163
- https://access.redhat.com/errata/RHEA-2025:4782
- https://access.redhat.com/errata/RHSA-2025:15900
- https://access.redhat.com/errata/RHSA-2025:15901
- https://access.redhat.com/errata/RHSA-2025:15904
1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')cwe-22 | 0% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.