FlawAtlas
Search the atlas
CVE-2025-4953 High

CVE-2025-4953

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.

Exploit probability 0.6%
Published September 16, 2025
Required by Not available
Last source change July 31, 2026

02 / AFFECTED SOFTWARE

Affected packages

Unknown Unknown
Go github.com/containers/podman
Go github.com/containers/podman/v2
Go github.com/containers/podman/v3
Go github.com/containers/podman/v4
Go github.com/containers/podman/v5
Go github.com/containers/podman/v5

03 / CONNECTIONS

Connected vulnerabilities

related OPENSUSE-SU-2026:21483-1

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2025-4953

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.

View original source
Open Source Vulnerabilities GO-2025-3961

Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman

View original source
Open Source Vulnerabilities GHSA-m68q-4hqr-mc6f

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.

View original source

05 / REFERENCES

Further evidence