Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 9

Количество 9

github логотип

GHSA-q6r4-3wmg-fwcq

3 месяца назад

Podman: WORKDIR symlink traversal vulnerability

CVSS3: 5.3
EPSS: Низкий
ubuntu логотип

CVE-2026-55686

3 месяца назад

Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an untrusted/malicious process that mutates the host filesystem tree during dereferencing of the WORKDIR path, to trigger a race condition. This vulnerability is fixed in 5.7.1.

CVSS3: 5.3
EPSS: Низкий
redhat логотип

CVE-2026-55686

3 месяца назад

Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an untrusted/malicious process that mutates the host filesystem tree during dereferencing of the WORKDIR path, to trigger a race condition. This vulnerability is fixed in 5.7.1.

CVSS3: 5.8
EPSS: Низкий
nvd логотип

CVE-2026-55686

3 месяца назад

Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an untrusted/malicious process that mutates the host filesystem tree during dereferencing of the WORKDIR path, to trigger a race condition. This vulnerability is fixed in 5.7.1.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2026-55686

3 месяца назад

Podman is a tool for managing OCI containers and pods. From 3.0.0 unti ...

CVSS3: 5.3
EPSS: Низкий
redos логотип

ROS-20260812-80-0023

около 1 месяца назад

Уязвимость podman

CVSS3: 5.3
EPSS: Низкий
redos логотип

ROS-20260812-73-0020

около 1 месяца назад

Уязвимость podman

CVSS3: 5.3
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3652-1

около 1 месяца назад

Security update for podman

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3536-1

около 2 месяцев назад

Security update for podman

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-q6r4-3wmg-fwcq

Podman: WORKDIR symlink traversal vulnerability

CVSS3: 5.3
0%
Низкий
3 месяца назад
ubuntu логотип
CVE-2026-55686

Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an untrusted/malicious process that mutates the host filesystem tree during dereferencing of the WORKDIR path, to trigger a race condition. This vulnerability is fixed in 5.7.1.

CVSS3: 5.3
0%
Низкий
3 месяца назад
redhat логотип
CVE-2026-55686

Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an untrusted/malicious process that mutates the host filesystem tree during dereferencing of the WORKDIR path, to trigger a race condition. This vulnerability is fixed in 5.7.1.

CVSS3: 5.8
0%
Низкий
3 месяца назад
nvd логотип
CVE-2026-55686

Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an untrusted/malicious process that mutates the host filesystem tree during dereferencing of the WORKDIR path, to trigger a race condition. This vulnerability is fixed in 5.7.1.

CVSS3: 5.3
0%
Низкий
3 месяца назад
debian логотип
CVE-2026-55686

Podman is a tool for managing OCI containers and pods. From 3.0.0 unti ...

CVSS3: 5.3
0%
Низкий
3 месяца назад
redos логотип
ROS-20260812-80-0023

Уязвимость podman

CVSS3: 5.3
0%
Низкий
около 1 месяца назад
redos логотип
ROS-20260812-73-0020

Уязвимость podman

CVSS3: 5.3
0%
Низкий
около 1 месяца назад
suse-cvrf логотип
SUSE-SU-2026:3652-1

Security update for podman

около 1 месяца назад
suse-cvrf логотип
SUSE-SU-2026:3536-1

Security update for podman

около 2 месяцев назад

Уязвимостей на страницу