CVE-2025-9566: Podman: podman kube play command may overwrite host files

Versions reported by the vendor

Affected version ranges reported by the assigning authority (redhat). Independent of NVD's CPE analysis and usually ahead of it.

• github.com/containers/podman podman

  • 4.0.0 and later · before 5.6.1affected · semver

• Red Hat Red Hat Enterprise Linux 10

  • 6:5.4.0-13.el10_0 and laternot affected · rpm
  • 7:5.6.0-5.el10_1 and laternot affected · rpm
  • 7:5.8.0-2.el10 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 8

  • 8100020250911075811.afee755d and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

  • 8060020250919150821.3b538bd8 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service

  • 8060020250919150821.3b538bd8 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

  • 8060020250919150821.3b538bd8 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service

  • 8080020250919060528.0f77c1b7 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

  • 8080020250919060528.0f77c1b7 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 9

  • 5:5.4.0-13.el9_6 and laternot affected · rpm
  • 6:5.6.0-6.el9_7 and laternot affected · rpm
  • 6:5.8.0-1.el9 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

  • 2:4.2.0-6.el9_0.5 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

  • 2:4.4.1-22.el9_2.4 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support

  • 4:4.9.4-18.el9_4.3 and laternot affected · rpm

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2025-10230Samba: command injection in wins server hook script
  52Plan
• CVE-2026-4631Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection
  44Plan
• CVE-2026-76578Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci
  39Monitor

Published before and after this one in the same product

• ← EarlierCVE-2025-7039Sep 3, 2025 · Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()
  14Monitor
• ← EarlierCVE-2025-9901Sep 3, 2025 · Libsoup: improper handling of http vary header in libsoup caching
  23Monitor
• Later →CVE-2025-5962Sep 22, 2025 · Rhel-lightspeed: improper access control in lightspeed history management allows local privilege manipulation
  30Monitor

Root cause

A user-supplied file name is joined with the allowed directory, but the result is never checked to confirm it is still inside that directory.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1const file = path.join(ROOT, req.query.name);2res.sendFile(file);

1const file = path.resolve(ROOT, req.query.name);2if (!file.startsWith(ROOT + path.sep)) {3  return res.sendStatus(400);4}5res.sendFile(file);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.