Medium severity5.5NVD Advisory· Published Sep 15, 2026· Updated Oct 27, 2026
CVE-2025-11395
CVE-2025-11395
Description
A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11- osv-coords10 versionspkg:rpm/almalinux/buildahpkg:rpm/almalinux/buildah-testspkg:rpm/almalinux/podmanpkg:rpm/almalinux/podman-dockerpkg:rpm/almalinux/podman-pluginspkg:rpm/almalinux/podman-remotepkg:rpm/almalinux/podman-testspkg:rpm/almalinux/skopeopkg:rpm/almalinux/skopeo-testspkg:rpm/opensuse/podman&distro=openSUSE%20Tumbleweed
< 2:1.43.1-7.el10_2+ 9 more
- (no CPE)range: < 2:1.43.1-7.el10_2
- (no CPE)range: < 2:1.43.1-7.el10_2
- (no CPE)range: < 6:5.8.2-8.el9_8
- (no CPE)range: < 6:5.8.2-8.el9_8
- (no CPE)range: < 6:5.8.2-8.el9_8
- (no CPE)range: < 6:5.8.2-8.el9_8
- (no CPE)range: < 6:5.8.2-8.el9_8
- (no CPE)range: < 2:1.22.2-6.el10_2
- (no CPE)range: < 2:1.22.2-6.el10_2
- (no CPE)range: < 6.1.2-1.1
Patches
Vulnerability mechanics
References
9- access.redhat.com/errata/RHSA-2026:70640nvd
- access.redhat.com/errata/RHSA-2026:70641nvd
- access.redhat.com/errata/RHSA-2026:88262nvd
- access.redhat.com/errata/RHSA-2026:89761nvd
- access.redhat.com/errata/RHSA-2026:90362nvd
- access.redhat.com/errata/RHSA-2026:90424nvd
- access.redhat.com/errata/RHSA-2026:90462nvd
- access.redhat.com/security/cve/CVE-2025-11395nvd
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.