{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/podman-4.4.0-to-5.8.7/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:podman:podman:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":10,"id":"CVE-2026-94603"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Podman (4.4.0 to 5.8.7)","Podman (6.0.0 to 6.1.2)"],"_cs_severities":["critical"],"_cs_tags":["container-security","vulnerability","sandbox-bypass"],"_cs_type":"advisory","_cs_vendors":["Podman"],"content_html":"\u003cp\u003eCVE-2026-94603 describes a security vulnerability in Podman that conflates container images with container checkpoints. Introduced in version 4.4.0, a feature enabled the distribution of container checkpoints via OCI registries to facilitate system migration. Podman identifies these images using the annotation \u003ccode\u003eio.podman.annotations.checkpoint.runtime.name\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eWhen \u003ccode\u003epodman run\u003c/code\u003e executes an image carrying this annotation, it prioritizes the checkpoint's internal configuration over any command-line security arguments provided by the user (e.g., \u003ccode\u003e--cap-drop\u003c/code\u003e, \u003ccode\u003e--security-opt\u003c/code\u003e). This allows a malicious or compromised container image to ignore intended sandboxing limitations, potentially executing with elevated capabilities. The Podman maintainers have opted to remove this checkpoint distribution functionality entirely to mitigate the risk of insecure container execution. Rootless containers are not currently affected as they do not support the checkpoint and restore feature.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThis vulnerability affects users of Podman versions 4.4.0 through 5.8.7 and 6.0.0 through 6.1.2. If a user pulls and runs a malicious container image specifically crafted with this annotation, they may unknowingly bypass host-level security restrictions enforced by the Podman daemon. This could lead to container escapes or the execution of processes with unauthorized privileges, impacting any environment relying on Podman for secure container isolation.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to Podman version 5.8.8 or later, or 6.1.3 or later, to receive the patch that removes checkpoint distribution functionality.\u003c/li\u003e\n\u003cli\u003eImplement an image scanning policy to inspect OCI manifests for the \u003ccode\u003eio.podman.annotations.checkpoint.runtime.name\u003c/code\u003e annotation before allowing container execution.\u003c/li\u003e\n\u003cli\u003eFavor the use of rootless container configurations where feasible, as these do not support the vulnerable checkpoint mechanism.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-15T22:22:43Z","date_published":"2026-10-15T22:22:43Z","id":"https://feed.craftedsignal.io/briefs/2026-10-podman-checkpoint-vulnerability/","summary":"Podman versions 4.4.0 through 6.1.2 allow container checkpoint images to override runtime security configurations, potentially bypassing user-defined sandbox constraints via the io.podman.annotations.checkpoint.runtime.name annotation.","title":"Podman Checkpoint Image Security Bypass","url":"https://feed.craftedsignal.io/briefs/2026-10-podman-checkpoint-vulnerability/"}],"language":"en","title":"CraftedSignal Threat Feed - Podman (4.4.0 to 5.8.7)","version":"https://jsonfeed.org/version/1.1"}