What’s Vulnerable › Products

podman vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your podman version is affected

Latest podman vulnerabilities

• CVE-2026-94603 — Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation (CVSS 10.0)
• CVE-2026-57231 — Podman: Malformed Image can trick podman run into leaking host environment variables into the container (CVSS 7.5)
• CVE-2026-55686 — Podman: WORKDIR symlink traversal vulnerability (CVSS 5.3)
• CVE-2026-33414 — PowerShell Command Injection in Podman HyperV Machine (CVSS 7.8)
• CVE-2024-3056 — Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack (CVSS 7.7)
• CVE-2023-0778 — (CVSS 6.8)
• CVE-2022-4123 — (CVSS 3.3)
• CVE-2022-4122 — (CVSS 5.3)
• CVE-2022-2989 — (CVSS 7.1)
• CVE-2022-2739 — (CVSS 5.3)
• CVE-2022-2738 — (CVSS 7.5)
• CVE-2019-25067 — Podman/Varlink API Privilege Escalation (CVSS 8.8)
• CVE-2022-1227 — (CVSS 8.8)
• CVE-2022-27649 — (CVSS 7.5)
• CVE-2021-4024 — (CVSS 6.5)
• CVE-2021-20188 — (CVSS 7.0)
• CVE-2021-20199 — (CVSS 5.9)
• CVE-2020-14370 — (CVSS 5.3)