Live › vulnerability › CVE-2026-57231
Go to dashboardPodman, the OCI container tool, passes host environment variables into a container when the container image declares a variable with a key but no value, and a wildcard setting can pass all of them. A malicious image can therefore read secrets such as tokens and keys that were set in the shell where podman run was launched.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:13 UTC, 0h before NVD. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| github.com/containers/libpod | go | >= 1.8.1 | – |
| github.com/containers/podman | go | all versions | – |
| github.com/containers/podman/v2 | go | all versions | – |
| github.com/containers/podman/v3 | go | all versions | – |
| github.com/containers/podman/v4 | go | all versions | – |
| github.com/containers/podman/v5 | go | < 5.8.4 | 5.8.4 |
| go.podman.io/podman/v6 | go | < 6.0.0 | 6.0.0 |
5.8.3 or older (or any 6.x below 6.0.0) on the v5 or v6 line, or any version of the v1 to v4 Go modules that depends on it5.8.4 or 6.0.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-57231")
Go Vulnerability Database, CC-BY 4.0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.