CVE-2025-11395

Medium

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host…

redhat·CWE-277·Published 2026-09-15

CVSS

5.5

EPSS

0.00

KEV

Exploits

Vendor statements (7)

cve.orgen

193 chars

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

NVDes

216 chars

Se encontró una vulnerabilidad en Podman. Si un atacante puede pasar un archivo tar personalizado al comando 'podman load', pueden crear archivos en la máquina host con las privilegias del usuario que ejecuta Podman.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.5	—	—	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
3.1	Primary	cve.org	5.5	—	—	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
3.1	Primary	cve.org	5.5	—	—	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
3.1	Primary	cve.org	5.5	—	—	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
3.1	Primary	cve.org	5.5	—	—	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
3.1	Primary	cve.org	5.5	—	—	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
3.1	Primary	cve.org	5.5	—	—	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
3.1	Primary	cve.org	5.5	—	—	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
3.1	Primary	NVD	5.5	2.1	3.4	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
3.1	Secondary	ENISA EUVD	5.5	—	—	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
3.1	Secondary	NVD	5.5	2.1	3.4	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L