ZeroDay Findings
Sign inSign up

Findings

CVE-2025-11395

A flaw was found in Podman.

Published Sep 15, 2026 · updated Oct 14, 2026

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the command, they can create files on the host machine with the privileges of the user running Podman.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 15, 2026 · NIST NVD

    Detected

    A flaw was found in Podman. If an attacker can pass a crafted tar archive to the command, they can create files on the host machine with the privileges of the user running Podman.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in Podman. If an attacker can pass a crafted tar archive to the command, they can create files on the host machine with the privileges of the user running Podman.

Sources

  • CVE.orgVulnerability recordCVE-2025-11395

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2025-11395

    30-day exploitation probability 0.4%

    first.org
  • NIST NVDVulnerability recordCVE-2025-11395

    A flaw was found in Podman. If an attacker can pass a crafted tar archive to the command, they can create files on the host machine with the privileges of the user running Podman.

    nvd.nist.gov

References

CVE-2025-11395 · ZeroDay Findings