Go/github.com/containers/podman CVE-2026-94603: critical 10

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

Action: Upgrade github.com/containers/podman to 5.8.8 or later.

go get github.com/containers/podman@v5.8.8

Affected

Fixed versions

Sources

• osv: GHSA-2cvf-wqm6-wr9g
• https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g
• https://nvd.nist.gov/vuln/detail/CVE-2026-94603
• https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92
• https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669
• https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c
• https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616
• https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627
• https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02
• https://github.com/podman-container-tools/podman
• https://github.com/podman-container-tools/podman/releases/tag/v5.8.8
• https://github.com/podman-container-tools/podman/releases/tag/v6.1.3

CVE-2026-94603 · published 2026-10-15T20:22:16Z · modified 2026-10-19T21:40:41.823033561Z · JSON