CVE-2025-11395 — Podman: arbitrary file write when importing oci archive
A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user…
Published: 2026-09-15 · CVSS: 5.5 · CVSS 3.1
A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7