CVE-2025-11395

Podman: arbitrary file write when importing oci archive

MEDIUM

5.5

CVSS Score

Published: September 15, 2026 at 10:59 PM UTC

Updated: October 27, 2026 at 05:16 AM UTC

4 products affected across 1 vendorEnterprise LinuxOpenShift Container PlatformHardened Images

Using Red Hat Enterprise Linux 10 by Red Hat?

Get instant alerts when new vulnerabilities affect Red Hat Enterprise Linux 10 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.4%

SSVC

No known exploit

Description

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Enterprise Linux · Red Hatrpm

90%

All versions10

Vendor states this is fixed in 2:1.22.2-8.el9_8 (unaffected)

Vendor states this is fixed in 2:1.43.1-7.el10_2 (unaffected)

Vendor states this is fixed in 2:1.43.3-2.el9_8 (unaffected)

Hardened Images · Red Hatcontainer

90%

All versions1

OpenShift Container Platform · Red Hatcontainer

90%

All versions4

Vendor states this is fixed in 4 (unaffected)

OpenShift Dev Spaces · Red Hatrpm

90%

All versions3

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (9)

VDB Entryx_refsource_REDHAT

Source: cverecord

https://access.redhat.com/security/cve/CVE-2025-11395

Issue Trackingx_refsource_REDHAT

Source: cverecord

https://bugzilla.redhat.com/show_bug.cgi?id=2402034