CVE-2026-55686
Fixed in a distro release EPSS <1%CVSS 5.3
Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where the WORKDIR path contains a symlink can create a directory or modify ownership on the host filesystem. Modified ownership is less likely to happen as that requires help from an untrusted/malicious process that mutates the host filesystem tree during dereferencing of the WORKDIR path, to trigger a race condition. This vulnerability is fixed in 5.7.1.
Products: podman-container-tools podman
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/containers/podman | no fix |
| Go | github.com/containers/podman/v2 | no fix |
| Go | github.com/containers/podman/v3 | no fix |
| Go | github.com/containers/podman/v4 | no fix |
| Go | github.com/containers/podman/v5 | 5.7.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian:13 | podman | no fix |
| Debian:14 | podman | 5.8.1+ds1-2 |
| Red Hat:hummingbird:1 | podman | 0:6.0.0-1.hum1 |
| Red Hat:hummingbird:1 | podman-docker | 0:6.0.0-1.hum1 |
| Red Hat:hummingbird:1 | podman-machine | 0:6.0.0-1.hum1 |
| Red Hat:hummingbird:1 | podman-remote | 0:6.0.0-1.hum1 |
| Red Hat:hummingbird:1 | podman-tests | 0:6.0.0-1.hum1 |
| Red Hat:hummingbird:1 | podmansh | 0:6.0.0-1.hum1 |
| SUSE:Enterprise Storage 7.1 | podman | 4.9.5-150300.9.83.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | podman | 4.9.5-150400.4.79.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | podman | 4.9.5-150400.4.79.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | podman | 4.9.5-150500.3.78.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | podman | 4.9.5-150500.3.78.1 |
| SUSE:Linux Enterprise Micro 5.3 | podman | 4.9.5-150400.4.79.1 |
| SUSE:Linux Enterprise Micro 5.4 | podman | 4.9.5-150400.4.79.1 |
| SUSE:Linux Enterprise Micro 5.5 | podman | 4.9.5-150500.3.78.1 |
| SUSE:Linux Enterprise Module for Containers 15 SP7 | podman | 4.9.5-150500.3.78.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | podman | 4.9.5-150400.4.79.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | podman | 4.9.5-150500.3.78.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | podman | 4.9.5-150500.3.78.1 |
| SUSE:Linux Enterprise Server 16.0 | podman | 5.4.2-160000.6.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | podman | 4.9.5-150400.4.79.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | podman | 4.9.5-150500.3.78.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | podman | 4.9.5-150500.3.78.1 |
| SUSE:Linux Enterprise Server for SAP applications 16.0 | podman | 5.4.2-160000.6.1 |
| SUSE:Linux Micro 6.0 | podman | 4.9.5-13.1 |
| Ubuntu:25.10 | podman | no fix |
| Ubuntu:26.04:LTS | podman | no fix |
| Ubuntu:26.10 | podman | no fix |
| openSUSE:Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 |
| openSUSE:Leap 16.0 | podman | 5.4.2-160000.6.1 |