CVE-2026-94603Critical· 10.0▾ MidnightPodman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied …
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 55 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.9%
Last analysed / modified upstream
Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
github.com/containers/podman >= 4.4.0, < 5.8.8go.podman.io/podman/v6 >= 6.0.0, < 6.1.3Patched in:
github.com/containers/podman 5.8.8go.podman.io/podman/v6 6.1.3Source: https://github.com/advisories/GHSA-2cvf-wqm6-wr9g
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-44301High· 7.3hugo: Hugo: Arbitrary file read/write via unrestricted file system access in Node-based asset pipelines (CVE-2026-44301)
CVE-2026-48702High· 7.5Rekor is a software supply chain transparency log
CVE-2026-115754Medium· 4.7serialize-javascript: serialize-javascript: Cross-site scripting via unescaped function serialization (CVE-2026-115754)
CVE-2026-101720Medium· 5.3mysql: mysql: unauthorized data modification via connection handling (CVE-2026-101720)
CVE-2026-107928Medium· 4.8curl: curl: info leak uploading over WebSockets with GnuTLS (CVE-2026-107928)
CVE-2026-107929Low· 3.7curl: curl: local interface connection reuse mixup (CVE-2026-107929)