What’s Vulnerable › Vulnerabilities

CVE-2025-6032: Podman: podman missing tls verification

• Severity: high (CVSS 8.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-24 · updated 2026-10-12
• Weakness: CWE-295

Description

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

Affected products

• Red Hat OpenShift Container Platform 4.18: all versions — fixed in 418.94.202507221927-0, 5:5.2.2-9.rhaos4.18.el9
• Red Hat Enterprise Linux 10: all versions — fixed in 6:5.4.0-12.el10_0
• Red Hat Enterprise Linux 8: all versions — fixed in 8100020250625105344.afee755d
• Red Hat Enterprise Linux 9: all versions — fixed in 5:5.4.0-12.el9_6
• Red Hat Enterprise Linux 9.4 Extended Update Support: all versions — fixed in 4:4.9.4-18.el9_4.2
• Red Hat OpenShift Container Platform 4.16: all versions — fixed in 416.94.202507222002-0, 4:4.9.4-14.rhaos4.16.el8
• Red Hat OpenShift Container Platform 4.17: all versions — fixed in 417.94.202507132309-0, 5:5.2.2-8.rhaos4.17.el8
• Red Hat OpenShift Container Platform 4.19: all versions — fixed in 4.19.9.6.202507152218-0, 5:5.4.0-6.rhaos4.19.el9
• Red Hat OpenShift Container Platform 4.20: all versions — fixed in 4.20.9.6.202509251656-0

How to fix

Upgrade to a fixed version: Red Hat OpenShift Container Platform 4.18 418.94.202507221927-0, 5:5.2.2-9.rhaos4.18.el9; Red Hat Enterprise Linux 10 6:5.4.0-12.el10_0; Red Hat Enterprise Linux 8 8100020250625105344.afee755d; Red Hat Enterprise Linux 9 5:5.4.0-12.el9_6; Red Hat Enterprise Linux 9.4 Extended Update Support 4:4.9.4-18.el9_4.2; Red Hat OpenShift Container Platform 4.16 416.94.202507222002-0, 4:4.9.4-14.rhaos4.16.el8; Red Hat OpenShift Container Platform 4.17 417.94.202507132309-0, 5:5.2.2-8.rhaos4.17.el8; Red Hat OpenShift Container Platform 4.19 4.19.9.6.202507152218-0, 5:5.4.0-6.rhaos4.19.el9; Red Hat OpenShift Container Platform 4.20 4.20.9.6.202509251656-0. Check the vendor advisory for mitigations.

References

• https://access.redhat.com/errata/RHSA-2025:10295
• https://access.redhat.com/errata/RHSA-2025:10549
• https://access.redhat.com/errata/RHSA-2025:10550
• https://access.redhat.com/errata/RHSA-2025:10551
• https://access.redhat.com/errata/RHSA-2025:10668
• https://access.redhat.com/errata/RHSA-2025:11359
• https://access.redhat.com/errata/RHSA-2025:11363
• https://access.redhat.com/errata/RHSA-2025:11677
• https://access.redhat.com/errata/RHSA-2025:11681
• https://access.redhat.com/errata/RHSA-2025:15397
• https://access.redhat.com/errata/RHSA-2025:9726
• https://access.redhat.com/errata/RHSA-2025:9751

Get alerted when CVE-2025-6032 or the next vulnerability affects your stack