CVE-2025-11395: Podman: arbitrary file write when importing oci archive
A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users or environments where Podman runs `podman load` on attacker-controlled or untrusted OCI tar archives are exposed. Files can be created on the host with the privileges of the user running Podman.
What does an attacker need to exploit it?
The attacker needs a way to provide a crafted tar archive that is passed to the `podman load` command. The available information indicates the attacker does not need user interaction once the crafted archive is loaded.
What can be done if patching is not immediately possible?
Do not run `podman load` on untrusted OCI archives. Restrict who can supply archives for loading and run Podman with the least privileges practical to limit the impact of host file creation.