Read the docs
TI-2026-71934 Aliases CVE-2026-94603GHSA-2cvf-wqm6-wr9g

Podman run ignores sandbox restrictions set by image annotation

Priority MEDIUM 50CWE-693Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 4 fixed, 8 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-693.

Summary

Podman from 4.4.0 before 5.8.8 and from 6.0.0 before 6.1.3 treats an image with the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint. Podman then silently ignores user-supplied restrictions such as --cap-drop=ALL, letting the image select weaker sandbox settings and capabilities (CWE-693). An attacker who supplies such an image needs no privileges or user interaction. Rootless containers are not affected.

Written with Claude Haiku 5.5 from the sources below · 2026-11-03

Description from the CNA

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00532 45th percentileScored 2026-11-07
Fix Partial podman (podman-container-tools): 5.8.8, 6.1.3github.com/containers/podman/v4 (Go): 5.8.8+2 more productsRed Hat: 4 advisoriesRed Hat: 4 fixed, 8 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
podman-container-toolspodman4.4.0 to before 5.8.8; 6.0.0 to before 6.1.35.8.8, 6.1.3Patch availableCNA
—github.com/containers/podman/v4 (Go)4.4.0 to before 5.8.85.8.8Patch availableGHSA-2cvf-wqm6-wr9g
—go.podman.io/podman/v6 (Go)6.0.0 to before 6.1.36.1.3Patch availableGHSA-2cvf-wqm6-wr9g
—github.com/containers/podman/v5 (Go)4.4.0 to before 5.8.85.8.8Patch availableGHSA-2cvf-wqm6-wr9g
  • podman Vendorpodman-container-tools Affected 4.4.0 to before 5.8.8; 6.0.0 to before 6.1.3 Fixed in 5.8.8, 6.1.3 Patch available CNA
  • github.com/containers/podman/v4 (Go) Vendor— Affected 4.4.0 to before 5.8.8 Fixed in 5.8.8 Patch available GHSA-2cvf-wqm6-wr9g
  • go.podman.io/podman/v6 (Go) Vendor— Affected 6.0.0 to before 6.1.3 Fixed in 6.1.3 Patch available GHSA-2cvf-wqm6-wr9g
  • github.com/containers/podman/v5 (Go) Vendor— Affected 4.4.0 to before 5.8.8 Fixed in 5.8.8 Patch available GHSA-2cvf-wqm6-wr9g

Remediation

Upgrade Podman to 5.8.8 or 6.1.3. Red Hat fixes are in RHSA-2026:88202, RHSA-2026:79546, RHSA-2026:74861 and RHSA-2026:74178. Red Hat lists no available plan for Red Hat Enterprise Linux 8 and 9, Red Hat OpenShift Container Platform 4 and 5, Red Hat Ansible Automation Platform 2, Red Hat Build of Podman Desktop, Red Hat OpenShift Dev Spaces and Red Hat Quay 3.

Written with Claude Haiku 5.5 from the sources below · 2026-11-03

  • Fix · CNA podman (podman-container-tools) Fixed in 5.8.8, 6.1.3
  • Fix · GHSA-2cvf-wqm6-wr9g github.com/containers/podman/v4 (Go) Fixed in 5.8.8 Advisory →
  • Fix · GHSA-2cvf-wqm6-wr9g go.podman.io/podman/v6 (Go) Fixed in 6.1.3 Advisory →
  • Fix · GHSA-2cvf-wqm6-wr9g github.com/containers/podman/v5 (Go) Fixed in 5.8.8 Advisory →

Red Hat 4 advisories

  • RHSA-2026:88202 Released 2026-10-22 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.8.2-10.el10_2, podman-docker-7:5.8.2-10.el10_2, podman-remote-7:5.8.2-10.el10_2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.8.2-10.el10_2
  • RHSA-2026:79546 Released 2026-10-08 · Red Hat rating Important
    Red Hat Quay 3.12.23
    • Red Hat Quay 3.12 registry.redhat.io/quay/quay-rhel8
  • RHSA-2026:74861 Released 2026-10-02 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images podman-6.1.3-1.hum1@aarch64, podman-6.1.3-1.hum1@src, podman-6.1.3-1.hum1@x86_64 +8
Show 1 more Red Hat advisories
  • RHSA-2026:74178 Released 2026-10-01 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images podman-5:6.1.2-1.1.hum1@aarch64, podman-5:6.1.2-1.1.hum1@src, podman-5:6.1.2-1.1.hum1@x86_64 +8

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Ansible Automation Platform 2AffectedNo fix yet
Red Hat Build of Podman DesktopAffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat OpenShift Dev SpacesAffectedNo fix yet
Red Hat Quay 3AffectedNo fix yet
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:88202
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:88202
Red Hat Hardened ImagesFixed RHSA-2026:74178, RHSA-2026:74861
Red Hat Quay 3.12Fixed RHSA-2026:79546
Not affected: 3 products
  • Red Hat Ansible Automation Platform 2
  • Red Hat OpenShift Virtualization 4
  • Red Hat Quay 3.12

Timeline

  1. 2026-10-13 Threatist record created from CVE-2026-94603
  2. 2026-10-13 CISA SSVC decision points changed
  3. 2026-10-15 Affected versions changed · Red Hat
  4. 2026-10-16 Alias added: GHSA-2cvf-wqm6-wr9g
  5. 2026-10-16 Fix available: Go/github.com/containers/[email protected], Go/go.podman.io/podman/[email protected] · GHSA-2cvf-wqm6-wr9g
  6. 2026-10-16 CVSS score added · GHSA-2cvf-wqm6-wr9g
  7. 2026-10-16 Weakness changed · GHSA-2cvf-wqm6-wr9g
  8. 2026-10-16 11 new references · GHSA-2cvf-wqm6-wr9g
  9. 2026-10-23 Fix available: RHSA-2026:88202 · Red Hat
  10. 2026-10-23 Fix available: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) · Red Hat
  11. 2026-10-25 EPSS moved to the below the 50th percentile
  12. 2026-10-30 Affected versions changed · Red Hat
  13. 2026-11-03 Fix available: Go/github.com/containers/podman/[email protected], Go/github.com/containers/podman/[email protected] · GHSA-2cvf-wqm6-wr9g

References

Advisory 1

Other 10

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences