CVE-2025-11395

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.1 / Impact : 3.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/errata/RHSA-2026:70640
https://access.redhat.com/errata/RHSA-2026:70641
https://access.redhat.com/errata/RHSA-2026:88262
https://access.redhat.com/errata/RHSA-2026:89761
https://access.redhat.com/errata/RHSA-2026:90362
https://access.redhat.com/errata/RHSA-2026:90424
https://access.redhat.com/errata/RHSA-2026:90462
https://access.redhat.com/security/cve/CVE-2025-11395
https://bugzilla.redhat.com/show_bug.cgi?id=2402034

Configurations

No configuration.

History

27 Oct 2026, 05:16

Type	Values Removed	Values Added
References		() https://access.redhat.com/errata/RHSA-2026:90362 - () https://access.redhat.com/errata/RHSA-2026:90424 - () https://access.redhat.com/errata/RHSA-2026:90462 -

26 Oct 2026, 08:17

Type	Values Removed	Values Added
References		() https://access.redhat.com/errata/RHSA-2026:89761 -

22 Oct 2026, 21:17

Type	Values Removed	Values Added
References		() https://access.redhat.com/errata/RHSA-2026:88262 -

14 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) Se encontró una vulnerabilidad en Podman. Si un atacante puede pasar un archivo tar personalizado al comando 'podman load', pueden crear archivos en la máquina host con las privilegias del usuario que ejecuta Podman.

24 Sep 2026, 04:17

Type	Values Removed	Values Added
References		() https://access.redhat.com/errata/RHSA-2026:70640 -

24 Sep 2026, 03:16

Type	Values Removed	Values Added
References		() https://access.redhat.com/errata/RHSA-2026:70641 -

Information

Published : 2026-09-15 23:16

Updated : 2026-10-27 05:16

NVD link : CVE-2025-11395

Mitre link : CVE-2025-11395

CVE.ORG link : CVE-2025-11395

JSON object : View

Products Affected

No product.

CWE

CWE-277

Insecure Inherited Permissions

{"id": "CVE-2025-11395", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-11395", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-16T19:44:06.242490Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 2.1}]}, "affected": [{"source": "secalert@redhat.com", "affectedData": [{"cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "versions": [{"status": "unaffected", "version": "2:1.43.1-7.el10_2", "lessThan": "*", "versionType": "rpm"}], "packageName": "buildah", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "versions": [{"status": "unaffected", "version": "2:1.22.2-6.el10_2", "lessThan": "*", "versionType": "rpm"}], "packageName": "skopeo", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:enterprise_linux:9::appstream"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "versions": [{"status": "unaffected", "version": "2:1.43.3-2.el9_8", "lessThan": "*", "versionType": "rpm"}], "packageName": "buildah", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:enterprise_linux:9::appstream"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "versions": [{"status": "unaffected", "version": "2:1.22.2-8.el9_8", "lessThan": "*", "versionType": "rpm"}], "packageName": "skopeo", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:enterprise_linux:9::appstream"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "versions": [{"status": "unaffected", "version": "6:5.8.2-8.el9_8", "lessThan": "*", "versionType": "rpm"}], "packageName": "podman", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:enterprise_linux:9::appstream"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "versions": [{"status": "unaffected", "version": "2:1.43.4-2.el9_8", "lessThan": "*", "versionType": "rpm"}], "packageName": "buildah", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:enterprise_linux:9::appstream"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "versions": [{"status": "unaffected", "version": "2:1.22.2-9.el9_8", "lessThan": "*", "versionType": "rpm"}], "packageName": "skopeo", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "podman", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "buildah", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "container-tools:rhel8/podman", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "skopeo", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:hummingbird:1"], "vendor": "Red Hat", "product": "Red Hat Hardened Images", "packageName": "podman", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "buildah", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "podman", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "rhcos", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "skopeo", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_devspaces:3"], "vendor": "Red Hat", "product": "Red Hat OpenShift Dev Spaces", "packageName": "devspaces/udi-base-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_devspaces:3"], "vendor": "Red Hat", "product": "Red Hat OpenShift Dev Spaces", "packageName": "devspaces/udi-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}]}], "published": "2026-09-15T23:16:59.933", "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:70640", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:70641", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:88262", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:89761", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:90362", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:90424", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:90462", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2025-11395", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2402034", "source": "secalert@redhat.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-277"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad en Podman. Si un atacante puede pasar un archivo tar personalizado al comando 'podman load', pueden crear archivos en la m\u00e1quina host con las privilegias del usuario que ejecuta Podman."}], "lastModified": "2026-10-27T05:16:55.007", "sourceIdentifier": "secalert@redhat.com"}