{"id":"CVE-2026-94603","published":"2026-10-13T17:17:49.123","lastModified":"2026-10-16T16:00:33.533","description":"Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-693"],"vendors":[],"products":[],"references":[{"url":"https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92","tags":[]},{"url":"https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669","tags":[]},{"url":"https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c","tags":[]},{"url":"https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616","tags":[]},{"url":"https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627","tags":[]},{"url":"https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02","tags":[]},{"url":"https://github.com/podman-container-tools/podman/releases/tag/v5.8.8","tags":[]},{"url":"https://github.com/podman-container-tools/podman/releases/tag/v6.1.3","tags":[]},{"url":"https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g","tags":[]}],"exploitRefs":[{"url":"https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92","tags":[]},{"url":"https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669","tags":[]},{"url":"https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c","tags":[]},{"url":"https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616","tags":[]},{"url":"https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627","tags":[]},{"url":"https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02","tags":[]},{"url":"https://github.com/podman-container-tools/podman/releases/tag/v5.8.8","tags":[]},{"url":"https://github.com/podman-container-tools/podman/releases/tag/v6.1.3","tags":[]},{"url":"https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g","tags":[]}],"hasPoc":true,"ai":{"summary":"Podman incorrectly treats images with specific annotations as checkpoints, silently ignoring user-defined security restrictions like capability drops. This allows attackers to bypass sandboxing controls and run containers with weaker security settings than intended.","exploitability":"Exploitation requires an attacker to push a malicious container image with the io.podman.annotations.checkpoint.runtime.name annotation, which is relatively straightforward but depends on the target system accepting and running such images.","blast_radius":"The impact could be significant across environments using Podman versions 4.4.0 through 5.8.7 and 6.1.0 through 6.1.2, where rootless containers are unaffected but privileged containers may run with reduced security controls.","remediation":"Upgrade to Podman version 5.8.8 or 6.1.3 immediately to address this checkpoint annotation handling vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["container","podman","privilege-escalation","checkpoint"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:44:33.866Z"}}