CVE-2025-4953

High CVSS: 7.4

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.

Vendor

Product

CWE

CWE-378

Yayın Tarihi

2025-09-16 15:15:45

Güncelleme

2026-01-15 10:16:05

Source Identifier

secalert@redhat.com

KEV Date Added

Kategoriler

CWE-378 HIGH 2025

Referanslar

https://access.redhat.com/errata/RHSA-2024:8690 https://access.redhat.com/errata/RHSA-2025:15904 https://access.redhat.com/errata/RHSA-2025:16724 https://access.redhat.com/errata/RHSA-2025:16729 https://access.redhat.com/errata/RHSA-2025:17669 https://access.redhat.com/errata/RHSA-2025:22265 https://access.redhat.com/errata/RHSA-2025:22275 https://access.redhat.com/errata/RHSA-2025:22695 https://access.redhat.com/errata/RHSA-2025:22724 https://access.redhat.com/errata/RHSA-2025:22732 https://access.redhat.com/errata/RHSA-2025:23113 https://access.redhat.com/errata/RHSA-2025:2703 https://access.redhat.com/errata/RHSA-2026:0316 https://access.redhat.com/security/cve/CVE-2025-4953 https://bugzilla.redhat.com/show_bug.cgi?id=2367235 https://github.com/containers/podman/pull/25173