Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-94603 · Microsoft / collected KEV context

EUVD-2026-98929

GHSA-2cvf-wqm6-wr9g

GO-2026-6770

cve-program · CVE-2026-94603

• https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g
• https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92
• https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669
• https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c
• https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616
• https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627
• https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02
• https://github.com/podman-container-tools/podman/releases/tag/v5.8.8
• https://github.com/podman-container-tools/podman/releases/tag/v6.1.3

euvd · EUVD-2026-98929

• https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g
• https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92
• https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669
• https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c
• https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616
• https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627
• https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02
• https://github.com/podman-container-tools/podman/releases/tag/v5.8.8
• https://github.com/podman-container-tools/podman/releases/tag/v6.1.3

nvd · CVE-2026-94603

• https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92
• https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669
• https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c
• https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616
• https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627
• https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02
• https://github.com/podman-container-tools/podman/releases/tag/v5.8.8
• https://github.com/podman-container-tools/podman/releases/tag/v6.1.3
• https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g

osv · GHSA-2cvf-wqm6-wr9g

• https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g
• https://nvd.nist.gov/vuln/detail/CVE-2026-94603
• https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92
• https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669
• https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c
• https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616
• https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627
• https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02
• https://github.com/podman-container-tools/podman
• https://github.com/podman-container-tools/podman/releases/tag/v5.8.8
• https://github.com/podman-container-tools/podman/releases/tag/v6.1.3

osv · GO-2026-6770

• https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g
• https://nvd.nist.gov/vuln/detail/CVE-2026-94603
• https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92
• https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669
• https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c
• https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616
• https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627
• https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02
• https://github.com/podman-container-tools/podman/releases/tag/v5.8.8
• https://github.com/podman-container-tools/podman/releases/tag/v6.1.3

• Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation · Affected-version evidence changed · 3 Nov 2026
• Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied con… · Advisory content revised · 1 Nov 2026