ZeroDay Findings
Sign inSign up

Findings

CVE-2025-4953

A flaw was found in Podman.

Published Sep 16, 2025 · updated Oct 14, 2026

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 16, 2025 · NIST NVD

    Detected

    A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.

Sources

  • CVE.orgVulnerability recordCVE-2025-4953

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2025-4953

    30-day exploitation probability 0.6%

    first.org
  • NIST NVDVulnerability recordCVE-2025-4953

    A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the c

    nvd.nist.gov

References