Live › vulnerability › CVE-2026-94603
Go to dashboardPodman's podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied restrictions such as --cap-drop=ALL. An attacker who controls an image can get a container with weaker sandboxing and extra capabilities than the operator requested.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:13 UTC, 0h before NVD. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| github.com/containers/podman | go | all versions | – |
| github.com/containers/podman/v2 | go | all versions | – |
| github.com/containers/podman/v3 | go | all versions | – |
| github.com/containers/podman/v4 | go | >= 4.4.0 | – |
| github.com/containers/podman/v5 | go | < 5.8.8 | 5.8.8 |
| go.podman.io/podman/v6 | go | >= 6.0.0, < 6.1.3 | 6.1.3 |
4.4.0 up to 5.8.8, or 6.0.0 up to 6.1.35.8.8 for the v5 line or 6.1.3 for the v6 lineEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.
This page as .md · .json · in your agent: get_signal("CVE-2026-94603")
Go Vulnerability Database, CC-BY 4.0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.