CVE-2026-24835

Name of the Vulnerable Software and Affected Versions Podman Desktop versions prior to 1.25.1

Description Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass allows any extension to circumvent permission checks and gain unauthorized access to all authentication sessions. The isAccessAllowed() function unconditionally returns true, enabling malicious extensions to impersonate any user, hijack authentication sessions, and access sensitive resources without authorization.

Recommendations Update Podman Desktop to version 1.25.1 or later.