Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-4953

Date: September 16, 2025

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.

Severity Score

Related Resources (9)

https://bugzilla.redhat.com/show_bug.cgi?id=2367235
https://access.redhat.com/errata/RHSA-2025:16724
https://access.redhat.com/errata/RHSA-2025:17669
https://github.com/containers/podman
https://github.com/advisories/GHSA-m68q-4hqr-mc6f
https://access.redhat.com/errata/RHSA-2025:16729
https://nvd.nist.gov/vuln/detail/CVE-2025-4953
https://access.redhat.com/security/cve/CVE-2025-4953
https://www.mend.io/vulnerability-database/CVE-2025-4953

Severity Score

Weakness Type (CWE)

Creation of Temporary File With Insecure Permissions

CWE-378

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): NONE

Do you need more information?

Contact Us