CVE-2026-94603

Summary

Podman incorrectly treats images with specific annotations as checkpoints, silently ignoring user-defined security restrictions like capability drops. This allows attackers to bypass sandboxing controls and run containers with weaker security settings than intended.

Exploitability

Exploitation requires an attacker to push a malicious container image with the io.podman.annotations.checkpoint.runtime.name annotation, which is relatively straightforward but depends on the target system accepting and running such images.

Blast radius

The impact could be significant across environments using Podman versions 4.4.0 through 5.8.7 and 6.1.0 through 6.1.2, where rootless containers are unaffected but privileged containers may run with reduced security controls.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Podman version 5.8.8 or 6.1.3 immediately to address this checkpoint annotation handling vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.