Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownersh…
Exact source revision recorded 3 Nov 2026 11:06:27 UTC. It does not establish the source's current position. Latest evidence.
euvd · EUVD-2026-39808
PublishedEUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields
datePublished: Jun 26, 2026, 4:30:41 PM
dateUpdated: Jun 26, 2026, 6:31:36 PM
6 related source bulletins · separate from aliases
RHSA-2026:29954: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
CVE-2026-55686 · CVE-2026-57231
SUSE-SU-2026:24233-1: Security update for podman
CVE-2026-55686 · CVE-2026-57231
SUSE-SU-2026:3662-1: Security update for podman
CVE-2026-55686 · CVE-2026-57231
SUSE-SU-2026:23205-1: Security update for podman
CVE-2026-55686 · CVE-2026-57231
SUSE-SU-2026:24378-1: Security update for podman
CVE-2025-22869 · CVE-2025-47913 · CVE-2025-47914 · CVE-2025-52881 · CVE-2025-6032 · CVE-2025-9566 · CVE-2026-34986 · CVE-2026-39829 · CVE-2026-39830 · CVE-2026-42508 · CVE-2026-55686 · CVE-2026-57231
openSUSE-SU-2026:22089-1: Security update for podman
CVE-2026-55686 · CVE-2026-57231
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON