Read the docs
TI-2026-20034 Aliases CVE-2026-24835

Podman Desktop Extension System Vulnerable to Authentication Bypass

Priority HIGH 79CWE-285Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · None
Fix status
Partial Red Hat: 2 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-285.

Summary

Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnerability in Podman Desktop prior to version 1.25.1 allows any extension to completely circumvent permission checks and gain unauthorized access to all authentication sessions. The `isAccessAllowed()` function unconditionally returns `true`, enabling malicious extensions to impersonate any user, hijack authentication sessions, and access sensitive resources without authorization. This vulnerability affects all versions of Podman Desktop. Version 1.25.1 contains a patch for the issue.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00302 23rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial podman-desktop (podman-desktop): 1.25.1Red Hat: 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
podman-desktoppodman-desktopbefore 1.25.11.25.1Patch availableCNA
  • podman-desktop Vendorpodman-desktop Affected before 1.25.1 Fixed in 1.25.1 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:linuxfoundation:podman_desktop:*:*:*:*:*:*:*:*before 1.25.1Vulnerablebackstage
  • cpe:2.3:a:linuxfoundation:podman_desktop:*:*:*:*:*:*:*:* Versions before 1.25.1 Vulnerable ·backstage

Remediation

  • Fix · CNA podman-desktop (podman-desktop) Fixed in 1.25.1

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Build of Podman DesktopAffectedNo fix yet
Red Hat Enterprise Linux 10AffectedNo fix yet: Fix deferred
Not affected: 2 products
  • Red Hat Build of Podman Desktop
  • Red Hat Build of Podman Desktop - Tech Preview

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-24835

References

Exploit 1

Patch 1

  • TI-2026-26370 Podman Desktop WebView Server Exposed CVSS 3.1CRITICAL 9.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences