CVE-2025-4953 — Creation of Temporary File With Insecure Permissions in Containers Podman V5

CWE-378 — Creation of Temporary File With Insecure Permissions9 documents7 sources
Severity
7.4HIGHNVD
EPSS
0.0%
top 91.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Podman Project PodmanGithub.com Containers Podman V5
Timeline
PublishedSep 16
Latest updateSep 17

Description

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NExploitability: 2.2 | Impact: 5.2

Affected Packages2 packages

▶Debianpodman_project/podman< 5.3.2+ds1-1+1

🔴Vulnerability Details

5
OSV
Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman↗2025-09-17
▶
OSV
CVE-2025-4953: A flaw was found in Podman↗2025-09-16
▶
GHSA
Podman Creates Temporary File with Insecure Permissions↗2025-09-16
▶
CVEList
Podman: build context bind mount↗2025-09-16
▶
OSV
Podman Creates Temporary File with Insecure Permissions↗2025-09-16
▶

📋Vendor Advisories

3
Red Hat
podman: Build Context Bind Mount↗2025-09-16
▶
Microsoft
Podman: build context bind mount↗2025-09-09
▶
Debian
CVE-2025-4953: libpod - A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --...↗2025
▶