CVEs-PoC/2025/CVE-2025-9566.md

CVE-2025-9566

Description

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.Binary-Affected: podmanUpstream-version-introduced: v4.0.0Upstream-version-fixed: v5.6.1

POC

Reference

No PoCs from references.

Github

• https://github.com/containers/filepath-securejoin
• https://github.com/fkie-cad/nvd-json-data-feeds