{"id":"EUVD-2026-39807","revision":"a0d73012f6f14b1ab9cbcec054dd2bbf","records":[{"revision":"a0d73012f6f14b1ab9cbcec054dd2bbf","observedAt":"2026-10-28T08:17:05.712+00:00","statement":{"source":"euvd","id":"EUVD-2026-39807","aliases":["CVE-2026-57231","GHSA-4hq8-gpf5-8p68"],"title":"Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container.…","description":"Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","score":7.5,"severity":null}],"references":["https://github.com/podman-container-tools/podman/security/advisories/GHSA-4hq8-gpf5-8p68","https://github.com/podman-container-tools/podman/commit/6c431b73dbf8e4b20b778644d7a80caebdb75050"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39807","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jun 26, 2026, 4:29:02 PM","dateUpdated":"Jun 27, 2026, 2:41:58 AM"},"relatedAdvisories":[{"id":"RHSA-2026:63307","title":"Red Hat Security Advisory: Red Hat Quay 3.15.8","vulnerabilityIds":["CVE-2026-15927","CVE-2026-18255","CVE-2026-44705","CVE-2026-49477","CVE-2026-56852","CVE-2026-57231","CVE-2026-59869","CVE-2026-67214","CVE-2026-67313","CVE-2026-67314","CVE-2026-67320","CVE-2026-67321","CVE-2026-69152","CVE-2026-69153","CVE-2026-73086","CVE-2026-73088","CVE-2026-73089"]},{"id":"WID-SEC-W-2026-2062","title":"Podman: Schwachstelle ermöglicht Offenlegung von Informationen","vulnerabilityIds":["CVE-2026-57231"]},{"id":"RHSA-2026:38504","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2026-33811","CVE-2026-39835","CVE-2026-57231"]},{"id":"openSUSE-SU-2026:22089-1","title":"Security update for podman","vulnerabilityIds":["CVE-2026-55686","CVE-2026-57231"]},{"id":"SUSE-SU-2026:24233-1","title":"Security update for podman","vulnerabilityIds":["CVE-2026-55686","CVE-2026-57231"]},{"id":"RHSA-2026:37072","title":"Red Hat Security Advisory: podman security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27136","CVE-2026-39829","CVE-2026-39830","CVE-2026-39832","CVE-2026-39835","CVE-2026-42508","CVE-2026-57231"]},{"id":"RHSA-2026:29954","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2026-55686","CVE-2026-57231"]},{"id":"RHSA-2026:52968","title":"Red Hat Security Advisory: Red Hat Quay 3.12.21","vulnerabilityIds":["CVE-2026-13149","CVE-2026-15927","CVE-2026-39822","CVE-2026-42504","CVE-2026-54058","CVE-2026-54060","CVE-2026-55379","CVE-2026-55380","CVE-2026-57231","CVE-2026-59197","CVE-2026-59199","CVE-2026-59200","CVE-2026-59204","CVE-2026-59205","CVE-2026-59869","CVE-2026-59885","CVE-2026-59886"]},{"id":"msrc_CVE-2026-57231","title":"Podman: Malformed Image can trick podman run into leaking host environment variables into the container","vulnerabilityIds":["CVE-2026-57231"]},{"id":"RHSA-2026:69255","title":"Red Hat Security Advisory: Red Hat Quay 3.16.6","vulnerabilityIds":["CVE-2026-13149","CVE-2026-15792","CVE-2026-15927","CVE-2026-16221","CVE-2026-18255","CVE-2026-32283","CVE-2026-33818","CVE-2026-39822","CVE-2026-44705","CVE-2026-49477","CVE-2026-54058","CVE-2026-54060","CVE-2026-54770","CVE-2026-55379","CVE-2026-55380","CVE-2026-56852","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-57231","CVE-2026-59197","CVE-2026-59199","CVE-2026-59200","CVE-2026-59204","CVE-2026-59205","CVE-2026-59869","CVE-2026-59879","CVE-2026-59885","CVE-2026-59886","CVE-2026-67213","CVE-2026-67214","CVE-2026-67313","CVE-2026-67314","CVE-2026-67320","CVE-2026-67321","CVE-2026-69152","CVE-2026-73086","CVE-2026-75593","CVE-2026-82417","CVE-2026-84375"]},{"id":"RHSA-2026:53520","title":"Red Hat Security Advisory: Red Hat Quay 3.10.25","vulnerabilityIds":["CVE-2026-13149","CVE-2026-15927","CVE-2026-39822","CVE-2026-42504","CVE-2026-54058","CVE-2026-54060","CVE-2026-55379","CVE-2026-55380","CVE-2026-57231","CVE-2026-59197","CVE-2026-59199","CVE-2026-59200","CVE-2026-59204","CVE-2026-59205","CVE-2026-59869","CVE-2026-59885","CVE-2026-59886"]},{"id":"RHSA-2026:54395","title":"Red Hat Security Advisory: Red Hat Quay 3.17.4","vulnerabilityIds":["CVE-2026-6322","CVE-2026-9277","CVE-2026-10143","CVE-2026-12143","CVE-2026-13149","CVE-2026-13676","CVE-2026-15927","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39835","CVE-2026-42508","CVE-2026-44432","CVE-2026-44990","CVE-2026-46597","CVE-2026-54058","CVE-2026-54060","CVE-2026-55379","CVE-2026-55380","CVE-2026-57231","CVE-2026-59197","CVE-2026-59199","CVE-2026-59200","CVE-2026-59204","CVE-2026-59205","CVE-2026-59869","CVE-2026-59885","CVE-2026-59886","CVE-2026-73086"]},{"id":"SUSE-SU-2026:3662-1","title":"Security update for podman","vulnerabilityIds":["CVE-2026-55686","CVE-2026-57231"]},{"id":"RHSA-2026:50931","title":"Red Hat Security Advisory: Red Hat Quay 3.9.25","vulnerabilityIds":["CVE-2026-13149","CVE-2026-15927","CVE-2026-39822","CVE-2026-42504","CVE-2026-54058","CVE-2026-54060","CVE-2026-55379","CVE-2026-55380","CVE-2026-57231","CVE-2026-59197","CVE-2026-59199","CVE-2026-59200","CVE-2026-59204","CVE-2026-59205","CVE-2026-59869","CVE-2026-59885","CVE-2026-59886"]},{"id":"SUSE-SU-2026:23205-1","title":"Security update for podman","vulnerabilityIds":["CVE-2026-55686","CVE-2026-57231"]},{"id":"RHSA-2026:44232","title":"Red Hat Security Advisory: OpenShift Container Platform 4.22.7 bug fix and security update","vulnerabilityIds":["CVE-2026-12505","CVE-2026-43037","CVE-2026-57231"]},{"id":"openSUSE-SU-2026:11437-1","title":"podman-6.0.2-1.1 on GA media","vulnerabilityIds":["CVE-2026-57231"]},{"id":"RHSA-2026:37123","title":"Red Hat Security Advisory: podman security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-25681","CVE-2026-27136","CVE-2026-39829","CVE-2026-39832","CVE-2026-39835","CVE-2026-42508","CVE-2026-57231"]},{"id":"RHSA-2026:70267","title":"Red Hat Security Advisory: Red Hat Quay 3.14.9","vulnerabilityIds":["CVE-2026-4427","CVE-2026-6322","CVE-2026-9277","CVE-2026-10143","CVE-2026-12143","CVE-2026-13149","CVE-2026-13676","CVE-2026-14257","CVE-2026-15792","CVE-2026-15927","CVE-2026-16221","CVE-2026-18255","CVE-2026-32591","CVE-2026-33747","CVE-2026-33748","CVE-2026-33818","CVE-2026-39820","CVE-2026-39821","CVE-2026-39822","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42499","CVE-2026-42504","CVE-2026-42508","CVE-2026-44432","CVE-2026-44486","CVE-2026-44487","CVE-2026-44488","CVE-2026-44492","CVE-2026-44494","CVE-2026-44495","CVE-2026-44496","CVE-2026-44705","CVE-2026-44990","CVE-2026-46595","CVE-2026-46597","CVE-2026-48526","CVE-2026-49477","CVE-2026-54058","CVE-2026-54060","CVE-2026-55379","CVE-2026-55380","CVE-2026-56852","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-57231","CVE-2026-59197","CVE-2026-59199","CVE-2026-59200","CVE-2026-59204","CVE-2026-59205","CVE-2026-59869","CVE-2026-59885","CVE-2026-59886","CVE-2026-67213","CVE-2026-67214","CVE-2026-67313","CVE-2026-67314","CVE-2026-67320","CVE-2026-67321","CVE-2026-69152","CVE-2026-69153","CVE-2026-73086","CVE-2026-73088","CVE-2026-73089","CVE-2026-84375"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-39807","identifiers":["EUVD-2026-39807","CVE-2026-57231","GHSA-4hq8-gpf5-8p68"]},"retained":false,"historicalAffected":[]}],"coverage":[]}