CVE-2025-9566

Published Sep 5, 2025

Last updated 2 hours ago

kube play

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-9566 involves a vulnerability in podman where the `kube play` command can be exploited to overwrite host files. This occurs when the kube file contains a ConfigMap or Secret volume mount, and the volume already has a symbolic link to a host file. An attacker can create a malicious symlink on the volume during the first start. Subsequent starts will follow this symlink, allowing the container to write to arbitrary files on the host. While the attacker controls the target path, they do not control the content written to the file, as the contents are defined in the YAML file by the end user.

Description: There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1
Source: secalert@redhat.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.1
Impact score: 5.2
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Severity: HIGH

Weaknesses

secalert@redhat.com: CWE-22

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 3

References