Go/github.com/containers/podman/v5 CVE-2026-94603: critical 10, EPSS 0.53%

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation in github.com/containers/podman

Action: Upgrade github.com/containers/podman/v5 to 5.8.8 or later.

go get github.com/containers/podman/v5@v5.8.8

Affected

Fixed versions

Sources

• osv: GO-2026-6770#Go/github.com/containers/podman/v5
• nvd: CVE-2026-94603
• https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g
• https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92
• https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669
• https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c
• https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616
• https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627
• https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02
• https://github.com/podman-container-tools/podman/releases/tag/v5.8.8
• https://github.com/podman-container-tools/podman/releases/tag/v6.1.3

CVE-2026-94603 · published 2026-10-19T21:08:35Z · modified 2026-10-19T21:31:50.570657066Z · JSON