{"id":"GO-2025-3777","revision":null,"records":[{"revision":"e404b9bf18c5493d8a9c8fc69a0eab01","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-6032","aliases":[],"title":"Podman: podman missing tls verification","description":"A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.","state":0,"publishedAt":"2025-06-24T13:50:47.955+00:00","modifiedAt":"2026-10-12T19:53:07.271+00:00","affected":[{"ecosystem":"https://github.com/containers/podman/","name":"podman","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"4.8.0\",\n                            \"lessThan\": \"5.5.2\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"packageName\": \"podman\",\n                    \"collectionURL\": \"https://github.com/containers/podman/\",\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"podman","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 10\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"podman\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"6:5.4.0-12.el10_0\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/o:redhat:enterprise_linux:10.0\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"container-tools:rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 8\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"container-tools:rhel8\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"8100020250625105344.afee755d\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:enterprise_linux:8::appstream\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"podman","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 9\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"podman\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"5:5.4.0-12.el9_6\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:enterprise_linux:9::appstream\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"podman","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"podman\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"4:4.9.4-18.el9_4.2\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:rhel_eus:9.4::appstream\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"podman","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat OpenShift Container Platform 4.16\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"podman\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"4:4.9.4-14.rhaos4.16.el8\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:openshift:4.16::el8\",\n                        \"cpe:/a:redhat:openshift:4.16::el9\"\n                    ]\n                }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift/ose-rhel-coreos-9","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat OpenShift Container Platform 4.16\",\n                    \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n                    \"packageName\": \"openshift/ose-rhel-coreos-9\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"416.94.202507222002-0\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:openshift:4.16::el9\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"podman","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat OpenShift Container Platform 4.17\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"podman\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"5:5.2.2-8.rhaos4.17.el8\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:openshift:4.17::el8\",\n                        \"cpe:/a:redhat:openshift:4.17::el9\"\n                    ]\n                }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift/ose-rhel-coreos-9","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat OpenShift Container Platform 4.17\",\n                    \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n                    \"packageName\": \"openshift/ose-rhel-coreos-9\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"417.94.202507132309-0\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:openshift:4.17::el9\"\n                    ]\n                }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift/ose-rhel-coreos-9","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat OpenShift Container Platform 4.18\",\n                    \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n                    \"packageName\": \"openshift/ose-rhel-coreos-9\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"418.94.202507221927-0\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:openshift:4.18::el9\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"podman","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat OpenShift Container Platform 4.18\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"podman\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"5:5.2.2-9.rhaos4.18.el9\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:openshift:4.18::el8\",\n                        \"cpe:/a:redhat:openshift:4.18::el9\"\n                    ]\n                }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift/ose-rhel-coreos-9","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat OpenShift Container Platform 4.19\",\n                    \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n                    \"packageName\": \"openshift/ose-rhel-coreos-9\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"4.19.9.6.202507152218-0\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:openshift:4.19::el9\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"podman","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat OpenShift Container Platform 4.19\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"podman\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"5:5.4.0-6.rhaos4.19.el9\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:openshift:4.19::el9\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift/ose-rhel-coreos-9","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat OpenShift Container Platform 4.20\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"openshift/ose-rhel-coreos-9\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"4.20.9.6.202509251656-0\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:openshift:4.20::el9\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift/ose-rhel-coreos-8","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat OpenShift Container Platform 4\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"openshift/ose-rhel-coreos-8\",\n                    \"defaultStatus\": \"affected\",\n                    \"cpes\": [\n                        \"cpe:/a:redhat:openshift:4\"\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","score":8.3,"severity":"HIGH"}],"references":["https://access.redhat.com/errata/RHSA-2025:10295","https://access.redhat.com/errata/RHSA-2025:10549","https://access.redhat.com/errata/RHSA-2025:10550","https://access.redhat.com/errata/RHSA-2025:10551","https://access.redhat.com/errata/RHSA-2025:10668","https://access.redhat.com/errata/RHSA-2025:11359","https://access.redhat.com/errata/RHSA-2025:11363","https://access.redhat.com/errata/RHSA-2025:11677","https://access.redhat.com/errata/RHSA-2025:11681","https://access.redhat.com/errata/RHSA-2025:15397","https://access.redhat.com/errata/RHSA-2025:9726","https://access.redhat.com/errata/RHSA-2025:9751","https://access.redhat.com/errata/RHSA-2025:9766","https://access.redhat.com/security/cve/CVE-2025-6032","https://bugzilla.redhat.com/show_bug.cgi?id=2372501","https://github.com/containers/podman/commit/726b506acc8a00d99f1a3a1357ecf619a1f798c3","https://github.com/containers/podman/security/advisories/GHSA-65gg-3w2w-hr4h"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-6032","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-6032","identifiers":["CVE-2025-6032"]},"retained":false,"historicalAffected":[]},{"revision":"5f59e487f06349128eb40c23bb3ada1d","observedAt":"2026-11-09T04:03:54.524+00:00","statement":{"source":"euvd","id":"EUVD-2025-19013","aliases":["CVE-2025-6032","GHSA-65gg-3w2w-hr4h"],"title":"A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.","description":"A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","score":8.3,"severity":null}],"references":["https://access.redhat.com/errata/RHSA-2025:10295","https://access.redhat.com/errata/RHSA-2025:10549","https://access.redhat.com/errata/RHSA-2025:10550","https://access.redhat.com/errata/RHSA-2025:10551","https://access.redhat.com/errata/RHSA-2025:10668","https://access.redhat.com/errata/RHSA-2025:11359","https://access.redhat.com/errata/RHSA-2025:11363","https://access.redhat.com/errata/RHSA-2025:11677","https://access.redhat.com/errata/RHSA-2025:11681","https://access.redhat.com/errata/RHSA-2025:15397","https://access.redhat.com/errata/RHSA-2025:9726","https://access.redhat.com/errata/RHSA-2025:9751","https://access.redhat.com/errata/RHSA-2025:9766","https://access.redhat.com/security/cve/CVE-2025-6032","https://bugzilla.redhat.com/show_bug.cgi?id=2372501","https://github.com/containers/podman/commit/726b506acc8a00d99f1a3a1357ecf619a1f798c3","https://github.com/containers/podman/security/advisories/GHSA-65gg-3w2w-hr4h"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-19013","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jun 24, 2025, 1:50:47 PM","dateUpdated":"Oct 12, 2026, 7:53:07 PM"},"relatedAdvisories":[{"id":"RHSA-2025:11677","title":"Red Hat Security Advisory: OpenShift Container Platform 4.18.21 bug fix and security update","vulnerabilityIds":["CVE-2024-45339","CVE-2025-6032","CVE-2025-48060"]},{"id":"RHSA-2025:10295","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.35 packages and security update","vulnerabilityIds":["CVE-2025-6032","CVE-2025-22871"]},{"id":"RHSA-2025:11363","title":"Red Hat Security Advisory: OpenShift Container Platform 4.19.5 bug fix and security update","vulnerabilityIds":["CVE-2025-6032","CVE-2025-48060"]},{"id":"SUSE-SU-2026:22451-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-47913","CVE-2025-47914","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566","CVE-2026-34986","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"RHSA-2025:15397","title":"Red Hat Security Advisory: OpenShift Container Platform 4.20.0 bug fix and security update","vulnerabilityIds":["CVE-2025-5914","CVE-2025-5994","CVE-2025-6032","CVE-2025-6965","CVE-2025-49794","CVE-2025-49796"]},{"id":"msrc_CVE-2025-6032","title":"Podman: podman missing tls verification","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2026:22516-1","title":"Security update for podman","vulnerabilityIds":["CVE-2024-6104","CVE-2025-22869","CVE-2025-27144","CVE-2025-47913","CVE-2025-47914","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566","CVE-2026-34986","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"SUSE-SU-2026:20641-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566"]},{"id":"RHSA-2025:9766","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.43 packages and security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2025:20805-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2025:02806-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-6032"]},{"id":"RHSA-2025:10550","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2025:02807-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-6032"]},{"id":"WID-SEC-W-2025-1389","title":"Podman: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","vulnerabilityIds":["CVE-2025-6032"]},{"id":"WID-SEC-W-2025-2043","title":"IBM QRadar SIEM: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2021-47670","CVE-2023-49083","CVE-2024-56644","CVE-2025-21727","CVE-2025-21759","CVE-2025-22058","CVE-2025-22097","CVE-2025-37914","CVE-2025-38085","CVE-2025-38159","CVE-2025-38200","CVE-2025-38250","CVE-2025-38380","CVE-2025-5914","CVE-2025-5994","CVE-2025-6020","CVE-2025-6032","CVE-2025-8194","CVE-2025-0164"]},{"id":"openSUSE-SU-2026:20305-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566"]},{"id":"openSUSE-SU-2025:15405-1","title":"govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media","vulnerabilityIds":["CVE-2024-44905","CVE-2024-44906","CVE-2024-56731","CVE-2025-0928","CVE-2025-1088","CVE-2025-30086","CVE-2025-32019","CVE-2025-3227","CVE-2025-3228","CVE-2025-3415","CVE-2025-4563","CVE-2025-4656","CVE-2025-46702","CVE-2025-4674","CVE-2025-47281","CVE-2025-47871","CVE-2025-47943","CVE-2025-4922","CVE-2025-4981","CVE-2025-49825","CVE-2025-5030","CVE-2025-51471","CVE-2025-52477","CVE-2025-52889","CVE-2025-52890","CVE-2025-52893","CVE-2025-52894","CVE-2025-52900","CVE-2025-52901","CVE-2025-52902","CVE-2025-52903","CVE-2025-52904","CVE-2025-52995","CVE-2025-52996","CVE-2025-52997","CVE-2025-53512","CVE-2025-53513","CVE-2025-53547","CVE-2025-53632","CVE-2025-53633","CVE-2025-53634","CVE-2025-53826","CVE-2025-53893","CVE-2025-53945","CVE-2025-54059","CVE-2025-54379","CVE-2025-5689","CVE-2025-5981","CVE-2025-6023","CVE-2025-6032","CVE-2025-6224","CVE-2025-6226","CVE-2025-6227","CVE-2025-6233","CVE-2025-6264","CVE-2025-6624"]},{"id":"RHSA-2025:10668","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"RHSA-2025:9751","title":"Red Hat Security Advisory: OpenShift Container Platform 4.19.2 packages and security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2025:20869-1","title":"Security update for podman","vulnerabilityIds":["CVE-2024-6104","CVE-2025-22869","CVE-2025-27144","CVE-2025-6032","CVE-2025-9566"]},{"id":"SUSE-SU-2025:20692-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-6032"]},{"id":"RHSA-2025:11359","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.36 bug fix and security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2026:20626-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566"]},{"id":"openSUSE-SU-2026:21244-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-47913","CVE-2025-47914","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566","CVE-2026-34986","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"RHSA-2025:11681","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.45 bug fix and security update","vulnerabilityIds":["CVE-2024-45339","CVE-2024-51744","CVE-2025-6032","CVE-2025-30204","CVE-2025-48060"]},{"id":"openSUSE-SU-2025:15262-1","title":"podman-5.5.2-1.1 on GA media","vulnerabilityIds":["CVE-2025-6032"]},{"id":"RHSA-2025:10551","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2026:24378-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-47913","CVE-2025-47914","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566","CVE-2026-34986","CVE-2026-39829","CVE-2026-39830","CVE-2026-42508","CVE-2026-55686","CVE-2026-57231"]},{"id":"RHSA-2025:10549","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"RHSA-2025:9726","title":"Red Hat Security Advisory: OpenShift Container Platform 4.18.19 packages and security update","vulnerabilityIds":["CVE-2025-6032"]},{"id":"SUSE-SU-2025:02808-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-6032"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-19013","identifiers":["EUVD-2025-19013","CVE-2025-6032","GHSA-65gg-3w2w-hr4h"]},"retained":false,"historicalAffected":[]},{"revision":"92466e12e8294767a6a7580a1540cf19","observedAt":"2026-10-25T03:17:27.277+00:00","statement":{"source":"nvd","id":"CVE-2025-6032","aliases":[],"title":"A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.","description":"A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.","state":0,"publishedAt":"2025-06-24T14:15:30.703+00:00","modifiedAt":"2026-10-12T20:17:07.103+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · secalert@redhat.com · Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","score":8.3,"severity":"HIGH"}],"references":["https://access.redhat.com/errata/RHSA-2025:10295","https://access.redhat.com/errata/RHSA-2025:10549","https://access.redhat.com/errata/RHSA-2025:10550","https://access.redhat.com/errata/RHSA-2025:10551","https://access.redhat.com/errata/RHSA-2025:10668","https://access.redhat.com/errata/RHSA-2025:11359","https://access.redhat.com/errata/RHSA-2025:11363","https://access.redhat.com/errata/RHSA-2025:11677","https://access.redhat.com/errata/RHSA-2025:11681","https://access.redhat.com/errata/RHSA-2025:15397","https://access.redhat.com/errata/RHSA-2025:9726","https://access.redhat.com/errata/RHSA-2025:9751","https://access.redhat.com/errata/RHSA-2025:9766","https://access.redhat.com/security/cve/CVE-2025-6032","https://bugzilla.redhat.com/show_bug.cgi?id=2372501","https://github.com/containers/podman/commit/726b506acc8a00d99f1a3a1357ecf619a1f798c3","https://github.com/containers/podman/security/advisories/GHSA-65gg-3w2w-hr4h"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-6032","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Deferred","weaknesses":["CWE-295"],"productCriteria":[],"sourceDates":{"published":"2025-06-24T14:15:30.703","lastModified":"2026-10-12T20:17:07.103"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2025-6032","identifiers":["CVE-2025-6032"]},"retained":false,"historicalAffected":[]},{"revision":"3f1a74fef2cd4fa1868c46f6b4ebc704","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-65gg-3w2w-hr4h","aliases":["CVE-2025-6032","GO-2025-3777"],"title":"Podman Improper Certificate Validation; machine missing TLS verification","description":"### Impact\nThe podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry (which it does by default since 5.0.0) allowing a possible Man In The Middle attack.\n\n### Patches\nhttps://github.com/containers/podman/commit/726b506acc8a00d99f1a3a1357ecf619a1f798c3\nFixed in v5.5.2\n\n### Workarounds\nDownload the disk image manually via some other tool that verifies the TLS connection. Then pass the local image as file path (podman machine init --image ./somepath)","state":0,"publishedAt":"2025-06-25T21:57:00+00:00","modifiedAt":"2026-09-10T03:50:24.8870802+00:00","affected":[{"ecosystem":"Go","name":"github.com/containers/podman/v4","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"4.8.0"},{"kind":"last_affected","version":"4.9.5"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v5","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"5.5.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://github.com/containers/podman/security/advisories/GHSA-65gg-3w2w-hr4h","https://nvd.nist.gov/vuln/detail/CVE-2025-6032","https://github.com/containers/podman/commit/726b506acc8a00d99f1a3a1357ecf619a1f798c3","https://github.com/containers/podman","https://bugzilla.redhat.com/show_bug.cgi?id=2372501","https://access.redhat.com/security/cve/CVE-2025-6032","https://access.redhat.com/errata/RHSA-2025:9766","https://access.redhat.com/errata/RHSA-2025:9751","https://access.redhat.com/errata/RHSA-2025:9726","https://access.redhat.com/errata/RHSA-2025:15397","https://access.redhat.com/errata/RHSA-2025:11681","https://access.redhat.com/errata/RHSA-2025:11677","https://access.redhat.com/errata/RHSA-2025:11363","https://access.redhat.com/errata/RHSA-2025:11359","https://access.redhat.com/errata/RHSA-2025:10668","https://access.redhat.com/errata/RHSA-2025:10551","https://access.redhat.com/errata/RHSA-2025:10550","https://access.redhat.com/errata/RHSA-2025:10549","https://access.redhat.com/errata/RHSA-2025:10295"],"sourceUrl":"https://github.com/advisories/GHSA-65gg-3w2w-hr4h","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-65gg-3w2w-hr4h","identifiers":["GHSA-65gg-3w2w-hr4h","CVE-2025-6032","GO-2025-3777"]},"retained":false,"historicalAffected":[]},{"revision":"494cae0b250944828f2ed89486bd2ea5","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-3777","aliases":["CVE-2025-6032","GHSA-65gg-3w2w-hr4h"],"title":"Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman","description":"Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman","state":0,"publishedAt":"2025-07-28T19:57:13+00:00","modifiedAt":"2026-02-04T02:15:34.946228+00:00","affected":[{"ecosystem":"Go","name":"github.com/containers/podman","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v3","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v4","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"4.8.0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/containers/podman/v5","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"5.5.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/containers/podman/security/advisories/GHSA-65gg-3w2w-hr4h","https://nvd.nist.gov/vuln/detail/CVE-2025-6032","https://github.com/containers/podman/commit/726b506acc8a00d99f1a3a1357ecf619a1f798c3","https://access.redhat.com/errata/RHSA-2025:10295","https://access.redhat.com/errata/RHSA-2025:10549","https://access.redhat.com/errata/RHSA-2025:10550","https://access.redhat.com/errata/RHSA-2025:10551","https://access.redhat.com/errata/RHSA-2025:10668","https://access.redhat.com/errata/RHSA-2025:9726","https://access.redhat.com/errata/RHSA-2025:9751","https://access.redhat.com/errata/RHSA-2025:9766","https://access.redhat.com/security/cve/CVE-2025-6032","https://bugzilla.redhat.com/show_bug.cgi?id=2372501"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-3777","license":"OSV · upstream source license applies","key":"osv:GO-2025-3777","identifiers":["GO-2025-3777","CVE-2025-6032","GHSA-65gg-3w2w-hr4h"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-10T10:21:23.1769119+00:00","complete":true,"records":1773,"lastAttemptAt":"2026-11-10T10:21:23.1769119+00:00","lastSuccessAt":"2026-11-10T10:21:23.4268898+00:00","error":null,"lastVerifiedAt":"2026-11-10T10:21:23.4268987+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-8859cf40d4337e24bd2f258cc7778fbad01bb24c79d057aaf34cf1dfc6f8917d-8bdcdeeb414e06ff50ed637d818ac25d52680d19f71fc0ebe3f4c4b3f836ed38","complete":true,"records":421927,"lastAttemptAt":"2026-11-10T10:21:22.8157744+00:00","lastSuccessAt":"2026-11-10T09:21:38.1064889+00:00","error":null,"lastVerifiedAt":"2026-11-10T10:21:22.8157744+00:00","snapshotPublishedAt":"2026-11-10T09:20:43+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-2e6a476534094233b48f2f0b6da5cf35","complete":true,"records":13689,"lastAttemptAt":"2026-11-10T10:21:50.2500014+00:00","lastSuccessAt":"2026-11-10T06:05:35.03+00:00","error":null,"lastVerifiedAt":"2026-11-10T06:05:35.03+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13742,"expectedIdentifiers":13742,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-10T10:21:23.1769119+00:00","complete":true,"records":1096,"lastAttemptAt":"2026-11-10T10:21:23.1769119+00:00","lastSuccessAt":"2026-11-10T10:21:23.4276529+00:00","error":null,"lastVerifiedAt":"2026-11-10T10:21:23.4276532+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-b0b0499af228434598651aa5d221386e","complete":false,"records":13695,"lastAttemptAt":"2026-11-10T10:21:49.6403901+00:00","lastSuccessAt":"2026-11-10T10:21:49.637+00:00","error":"100 identifier lookups failed; latest failures include request timeout. Other identifiers were checked independently.","lastVerifiedAt":"2026-11-10T10:21:49.637+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13642,"expectedIdentifiers":13742,"failedIdentifiers":100},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-cdffb4589856378aa42e8d1bd4a6c74e27a180d8160bf764c44715ef760f0a62","complete":true,"records":9932,"lastAttemptAt":"2026-11-10T10:21:23.1241572+00:00","lastSuccessAt":"2026-11-10T00:04:19.8260565+00:00","error":null,"lastVerifiedAt":"2026-11-10T10:21:23.1241572+00:00","snapshotPublishedAt":"2026-11-09T23:48:01+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-26503967ae4379db8f374089589d6e03fb15bd31f820c9e992aaf93840c2236c","complete":true,"records":1971,"lastAttemptAt":"2026-11-10T10:21:22.8858542+00:00","lastSuccessAt":"2026-11-09T21:02:20.472473+00:00","error":null,"lastVerifiedAt":"2026-11-10T10:21:22.8858542+00:00","snapshotPublishedAt":"2026-11-09T20:18:18+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-94169eec81ea3989aa551092397ff34ae53c104b4a6ce646e1524452e4ab2a39","complete":true,"records":3065,"lastAttemptAt":"2026-11-10T10:21:23.1397622+00:00","lastSuccessAt":"2026-11-10T08:04:45.5923716+00:00","error":null,"lastVerifiedAt":"2026-11-10T10:21:23.1397622+00:00","snapshotPublishedAt":"2026-11-10T06:48:01+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-4331051b0b2d4ccdbdca3aa196b0be3818a465064a4b18dde4cf39c2250eb490","complete":true,"records":231599,"lastAttemptAt":"2026-11-10T10:21:23.0142877+00:00","lastSuccessAt":"2026-11-10T08:04:37.1757322+00:00","error":null,"lastVerifiedAt":"2026-11-10T10:21:23.0142877+00:00","snapshotPublishedAt":"2026-11-10T07:33:02+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}