Description
Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| podman-container-tools | podman | >= 1.8.1, < 5.8.4 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | podman | 5.8.4+ds1-1 | — |
| Debian 13 | podman | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | podman | No fix yet | — |
| Ubuntu 26.04 LTS | podman | No fix yet | — |
| Ubuntu 25.10 | podman | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | podman +3 | 7:5.8.2-4.el10_2 | RHSA-2026:37072 |
| RHEL 9 | podman +4 | 6:5.8.2-4.el9_8 | RHSA-2026:37123 |
| RHEL 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | buildah +1 | 2:1.33.14-4.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | cockpit-podman | 84.1-1.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | conmon | 3:2.1.10-1.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | container-selinux | 2:2.229.0-3.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | containernetworking-plugins | 1:1.4.0-8.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | containers-common | 2:1-82.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | crit +4 | 3.18-5.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | crun | 1.14.3-2.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | netavark | 2:1.10.3-1.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | podman +6 | 4:4.9.4-34.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | python-podman +1 | 4.9.0-3.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | runc | 4:1.2.9-4.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | skopeo +1 | 2:1.14.6-2.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | slirp4netns | 1.2.3-1.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | toolbox +1 | 0.0.99.5.1-1.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
| RHEL 8 | udica | 0.2.6-21.module+el8.10.0+24510+6ea3880e | RHSA-2026:38504 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Hardened Images 1 | podman +5 | 6.0.0-1.hum1 | RHSA-2026:29954 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | podman +4 | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux 8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:38504 |
| AlmaLinux 8 | buildah +1 | 2:1.33.14-4.module_el8.10.0+4213+0493256b | ALSA-2026:38504 |
| AlmaLinux 8 | cockpit-podman | 84.1-1.module_el8.10.0+4102+6c76e544 | ALSA-2026:38504 |
| AlmaLinux 8 | conmon | 3:2.1.10-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:38504 |
| AlmaLinux 8 | container-selinux | 2:2.229.0-3.module_el8.10.0+4213+0493256b | ALSA-2026:38504 |
| AlmaLinux 8 | containernetworking-plugins | 1:1.4.0-8.module_el8.10.0+4136+16425343 | ALSA-2026:38504 |
| AlmaLinux 8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2026:38504 |
| AlmaLinux 8 | crit | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2026:38504 |
| AlmaLinux 8 | criu +1 | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:38504 |
| AlmaLinux 8 | criu-devel | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2026:38504 |
| AlmaLinux 8 | criu-libs | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:38504 |
| AlmaLinux 8 | crun | 1.14.3-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:38504 |
| AlmaLinux 8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2026:38504 |
| AlmaLinux 8 | libslirp | 4.4.0-2.module_el8.10.0+4023+db236c53 | ALSA-2026:38504 |
| AlmaLinux 8 | libslirp-devel | 4.4.0-2.module_el8.10.0+3970+8445edf6 | ALSA-2026:38504 |
| AlmaLinux 8 | netavark | 2:1.10.3-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:38504 |
| AlmaLinux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:38504 |
| AlmaLinux 8 | podman +6 | 4:4.9.4-34.module_el8.10.0+4227+f1240cfc | ALSA-2026:38504 |
| AlmaLinux 8 | python3-podman | 4.9.0-3.module_el8.10.0+4016+efd18bf8 | ALSA-2026:38504 |
| AlmaLinux 8 | runc | 4:1.2.9-4.module_el8.10.0+4136+16425343 | ALSA-2026:38504 |
| AlmaLinux 8 | skopeo +1 | 2:1.14.6-2.module_el8.10.0+4211+49ea0979 | ALSA-2026:38504 |
| AlmaLinux 8 | slirp4netns | 1.2.3-1.module_el8.10.0+3926+f12484f5 | ALSA-2026:38504 |
| AlmaLinux 8 | toolbox +1 | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:38504 |
| AlmaLinux 8 | udica | 0.2.6-21.module_el8.10.0+4068+0e21408f | ALSA-2026:38504 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | podman | 7:5.8.2-4.el10_2 | RLSA-2026:37072 |
| Rocky Linux 9 | podman | 6:5.8.2-4.el9_8 | RLSA-2026:37123 |
| Rocky Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1874+ce489889 | RLSA-2026:38504 |
| Rocky Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
| Rocky Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
| Rocky Linux 8 | container-selinux | 2:2.229.0-3.module+el8.10.0+40223+e940a224 | RLSA-2026:38504 |
| Rocky Linux 8 | containernetworking-plugins | 1:1.4.0-8.module+el8.10.0+40133+32c21f88 | RLSA-2026:38504 |
| Rocky Linux 8 | containers-common | 2:1-82.module+el8.10.0+1843+6892ab28 | RLSA-2026:38504 |
| Rocky Linux 8 | criu | 3.18-5.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
| Rocky Linux 8 | crun | 1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
| Rocky Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
| Rocky Linux 8 | libslirp | 4.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
| Rocky Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
| Rocky Linux 8 | python-podman | 4.9.0-3.module+el8.10.0+1896+b18fa106 | RLSA-2026:38504 |
| Rocky Linux 8 | runc | 4:1.2.9-4.module+el8.10.0+40133+32c21f88 | RLSA-2026:38504 |
| Rocky Linux 8 | skopeo | 2:1.14.6-2.module+el8.10.0+40223+e940a224 | RLSA-2026:38504 |
| Rocky Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
| Rocky Linux 8 | toolbox | 0.0.99.5.1-1.module+el8.10.0+40087+cfe9c127.rocky.0.2 | RLSA-2026:38504 |
| Rocky Linux 8 | udica | 0.2.6-21.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | podman | 4.9.5-150500.3.78.1 | SUSE-SU-2026:3536-1 |
| SLES 15 SP6 | podman | 4.9.5-150500.3.78.1 | SUSE-SU-2026:3536-1 |
| SLES 15 SP5 | podman | 4.9.5-150500.3.78.1 | SUSE-SU-2026:3536-1 |
| SLES 15 SP4 | podman | 4.9.5-150400.4.79.1 | SUSE-SU-2026:3652-1 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | podman | 5.4.2-160000.6.1 | SUSE-SU-2026:24233-1 |
| SLES for SAP 15 SP6 | podman | 4.9.5-150500.3.78.1 | SUSE-SU-2026:3536-1 |
| SLES for SAP 15 SP5 | podman | 4.9.5-150500.3.78.1 | SUSE-SU-2026:3536-1 |
| SLES for SAP 15 SP4 | podman | 4.9.5-150400.4.79.1 | SUSE-SU-2026:3652-1 |
| SLES 16.0 | podman | 5.4.2-160000.6.1 | SUSE-SU-2026:24233-1 |
| SLE Micro 6.1 | podman | 5.4.2-slfo.1.1_6.1 | SUSE-SU-2026:24378-1 |
| SLE Micro 6.0 | podman | 4.9.5-13.1 | SUSE-SU-2026:23205-1 |
| SLE Micro 5.5 | podman | 4.9.5-150500.3.78.1 | SUSE-SU-2026:3536-1 |
| SLE Micro 5.4 | podman | 4.9.5-150400.4.79.1 | SUSE-SU-2026:3652-1 |
| SLE Micro 5.3 | podman | 4.9.5-150400.4.79.1 | SUSE-SU-2026:3652-1 |
| SLE HPC 15 SP5 | podman | 4.9.5-150500.3.78.1 | SUSE-SU-2026:3536-1 |
| SLE HPC 15 SP4 | podman | 4.9.5-150400.4.79.1 | SUSE-SU-2026:3652-1 |
| SUSE Enterprise Storage 7.1 | podman | 4.9.5-150300.9.83.1 | SUSE-SU-2026:3662-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | podman | 6.0.2-1.1 | openSUSE-SU-2026:11437-1 |
| openSUSE Leap 16.0 | podman | 5.4.2-160000.6.1 | openSUSE-SU-2026:22089-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | podman | 5.8.6-r0 | — |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | podman | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | podman +3 | 7:5.8.2-5.0.1.el10_2 | ELSA-2026-37072 |
| Oracle Linux 9 | podman +4 | 6:5.8.2-4.0.1.el9_8 | ELSA-2026-37123 |
| Oracle Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | buildah +1 | 2:1.33.14-4.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | container-selinux | 2:2.229.0-3.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.4.0-8.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | containers-common | 2:1-82.0.1.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | crit +4 | 3.18-5.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | crun | 1.14.3-2.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | podman +6 | 4:4.9.4-34.0.1.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | python3-podman | 4.9.0-3.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | runc | 4:1.2.9-4.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | skopeo +1 | 2:1.14.6-2.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
| Oracle Linux 8 | udica | 0.2.6-21.module+el8.10.0+90960+1362bdc4 | ELSA-2026-38504 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/containers/libpod | >= 1.8.1 | — | GO-2026-6594 |
| Go | github.com/containers/podman | >= 1.8.1 | — | GHSA-4hq8-gpf5-8p68 |
| Go | github.com/containers/podman | all versions | — | GO-2026-6594 |
| Go | github.com/containers/podman/v2 | <= 2.2.1 | — | GHSA-4hq8-gpf5-8p68 |
| Go | github.com/containers/podman/v2 | all versions | — | GO-2026-6594 |
| Go | github.com/containers/podman/v3 | <= 3.4.7 | — | GHSA-4hq8-gpf5-8p68 |
| Go | github.com/containers/podman/v3 | all versions | — | GO-2026-6594 |
| Go | github.com/containers/podman/v4 | <= 4.9.5 | — | GHSA-4hq8-gpf5-8p68 |
| Go | github.com/containers/podman/v4 | all versions | — | GO-2026-6594 |
| Go | github.com/containers/podman/v5 | < 5.8.4 | 5.8.4 | GHSA-4hq8-gpf5-8p68 |
| Go | go.podman.io/podman/v6 | < 6.0.0 | 6.0.0 | GHSA-4hq8-gpf5-8p68 |
Advisories 21
- ALSA-2026:37123 Important: podman security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:38504 Important: container-tools:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- SUSE-SU-2026:24378-1 Security update for podman SUSE / openSUSE Security Updates · Oct 27, 2026
- WID-SEC-2026-2062 Podman: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Oct 26, 2026
- SUSE-SU-2026:24233-1 Security update for podman SUSE / openSUSE Security Updates · Oct 21, 2026
- RHSA-2026:38504 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:37123 Red Hat Security Advisory: podman security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:37072 Red Hat Security Advisory: podman security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- openSUSE-SU-2026:22089-1 Security update for podman SUSE / openSUSE Security Updates · Oct 19, 2026
- RHSA-2026:29954 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- SUSE-SU-2026:23205-1 Security update for podman SUSE / openSUSE Security Updates · Aug 26, 2026
- SUSE-SU-2026:3652-1 Security update for podman SUSE / openSUSE Security Updates · Aug 21, 2026
- SUSE-SU-2026:3662-1 Security update for podman SUSE / openSUSE Security Updates · Aug 21, 2026
- SUSE-SU-2026:3536-1 Security update for podman SUSE / openSUSE Security Updates · Aug 10, 2026
- openSUSE-SU-2026:11437-1 podman-6.0.2-1.1 on GA media SUSE / openSUSE Security Updates · Aug 3, 2026
- ELSA-2026-37072 Important: podman security, bug fix, and enhancement update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jul 23, 2026
- ELSA-2026-38504 Important: container-tools:ol8 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jul 15, 2026
- RLSA-2026:38504 Important: container-tools:rhel8 security update Rocky Linux Security Advisories · Jul 13, 2026
- RLSA-2026:37072 Important: podman security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 10, 2026
- RLSA-2026:37123 Important: podman security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 10, 2026
- ELSA-2026-37123 Important: podman security, bug fix, and enhancement update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 10, 2026