漏洞历史说明了什么
该软件包含 17 个已记录的 CVE，最高 CVSS 得分为 8.8，KEV 目录中包含 0 个已知被利用的漏洞。
如何保障安全
运维人员应将部署保持在受支持的发布线（例如 6.1）上，并定期跟踪已安装的版本。
检查您的版本
podman --version受影响的版本系列
已知漏洞
| CVE | 标题 | 受影响版本 | CVSS | 被利用 | EPSS | 发布日期 |
|---|---|---|---|---|---|---|
| CVE-2026-55686 | Podman: WORKDIR symlink traversal vulnerability | ≥ 3.0.0 < 5.7.1 | 5.3 | — | 2026-06-27 | |
| CVE-2026-57231 | Podman: Malformed Image can trick podman run into leaking host environment variables into the container | ≥ 1.8.1 < 5.8.4 = 6.0.0 | 7.5 | — | 2026-06-27 | |
| CVE-2026-33414 | PowerShell Command Injection in Podman HyperV Machine | ≥ 4.8.0 < 5.8.2 | 4.0 | — | 2026-04-15 | |
| CVE-2024-3056 | Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack | ≤ 5.2.0 | 7.7 | — | 2024-08-03 | |
| CVE-2023-0778 | A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replac... | * | 6.8 | — | 2023-03-27 | |
| CVE-2022-4122 | A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dock... | = 4.3.0 | 5.3 | — | 2022-12-08 | |
| CVE-2022-4123 | A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect abso... | = 4.1.0 = 4.1.1 = 4.2.0 | 3.3 | — | 2022-12-08 | |
| CVE-2022-2989 | An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive i... | * | 7.1 | — | 2022-09-13 | |
| CVE-2022-2739 | The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included a... | = 1.6.4-32.el7_9 | 5.3 | — | 2022-09-02 | |
| CVE-2022-2738 | The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included a... | = 1.6.4-32.el7_9 | 7.5 | — | 2022-09-02 | |
| CVE-2019-25067 | Podman/Varlink API Privilege Escalation | = 1.5.1 | 6.3 | — | 2022-06-09 | |
| CVE-2022-1227 | A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to... | < 4.0.0 | 8.8 | — | 2022-04-30 | |
| CVE-2022-27649 | A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vu... | < 4.0.3 | 7.5 | — | 2022-04-05 | |
| CVE-2021-4024 | A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine co... | ≥ 3.3.0 < 3.4.3 | 6.5 | — | 2021-12-24 | |
| CVE-2021-20188 | A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container... | < 1.7.0 | 7.0 | — | 2021-02-12 | |
| CVE-2021-20199 | Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from... | ≥ 1.8.0 < 3.0.0 | 5.9 | — | 2021-02-03 | |
| CVE-2020-14370 | An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using th... | < 2.0.5 | 5.3 | — | 2020-09-23 |
数据来源：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS 详见 https://www.first.org/epss）、endoflife.date。软件列表：awesome-selfhosted（CC BY-SA 3.0）。