PT-2025-38004

CVE-2025-4953

·

Published

2025-09-16

·

Updated

2026-10-14

Description by

CVSS 3.1
7.4
High
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Podman (affected versions not specified)
Description A flaw exists in Podman where data written to RUN --mount=type=bind mounts during the podman build process is not discarded. This can result in files created within the container appearing in the temporary build context directory on the host, potentially leaving the created files accessible.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
GHSA-M68Q-4HQR-MC6F
AZL-68054
CESA-2025_15904
GO-2025-3961
OPENSUSE-SU-2025:15564-1
OPENSUSE-SU-2026:21483-1
RHSA-2024:8690
RHSA-2025:15904
RHSA-2025_15904
RHSA-2025:16724
RHSA-2025:16729
RHSA-2025:17669
SUSE-SU-2025:03289-1
Found an issue in the description? Have something to add? Feel free to write us 👾