Red Hat Red Hat Build of Podman Desktop vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Red Hat Red Hat Build of Podman Desktop: 2 record(s), with affected versions and fixes.
CVE-2026-114236
Low · 3.3
CWE-772 Oct 21, 2026
Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor
limit
CVE-2026-107935
Critical · 9.3
CWE-22 Oct 9, 2026
Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.