This vulnerability in Podman arises from improper handling of data written to bind mounts during the build process, resulting in files created inside containers being left accessible on the host's temporary build context directory. This exposure can lead to unauthorized access to sensitive files created during container builds. The issue is tracked as CVE-2025-4953 with a CVSS 3.1 score of 7.4 (High), indicating network attack vector, high complexity, no privileges required, no user interaction, and high confidentiality and integrity impact. Red Hat has released updated packages and container images for OpenShift Container Platform 4.13 and container-tools modules for RHEL 8 that include fixes for this and related vulnerabilities.

Files created within containers during build processes may remain accessible on the host system with insecure permissions, potentially exposing sensitive data or allowing unauthorized modification. The vulnerability impacts confidentiality and integrity but not availability. The CVSS score of 7.4 reflects a high severity due to the potential for sensitive data exposure without requiring privileges or user interaction.

Red Hat has released official security updates that address this vulnerability. Users of Red Hat OpenShift Container Platform 4.13 and container-tools modules for RHEL 8 should apply the updated packages and container images as provided in advisories RHSA-2024:8690 and RHSA-2025:15904. Instructions for upgrading clusters and applying updates are available in the Red Hat documentation. Patch status is confirmed; applying these updates fully mitigates the issue.