Skip to main content
CVE-2026-34045VulnerabilityPublished Updated

Bundesamt für Sicherheit in der Informationstechnik Open Source · Podman Desktop: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen

Affects Bundesamt für Sicherheit in der Informationstechnik Open SourceSource GCVE Database

0

Not known to be exploited : upgrade to 1.26.2 soon.

Data as of 27 Oct 2026, 01:53 UTC

Severity
High

Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Patch
Available – fixed in 1.26.2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 7 Apr 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade Bundesamt für Sicherheit in der Informationstechnik Open Source to 1.26.2.

Affected software

ProductAffectedFixed in
Bundesamt für Sicherheit in der Informationstechnik Open SourceAffected
  • <1.26.2
  • =1.26.2
Fixed in
  • 1.26.2

AI-suggested

A fix is available in Podman Desktop version 1.26.2. Users and administrators should update affected installations to version 1.26.2 or later. Red Hat provides updated packages and detailed instructions for applying the update in their advisory. No additional mitigation steps are indicated beyond applying the official patch.

Description

CVE-2026-34045 is a vulnerability in Podman Desktop, an open-source graphical tool for managing containers and Kubernetes environments on the desktop. The flaw involves an unauthenticated HTTP server that can be exploited to cause denial of service and information disclosure. The issue affects versions prior to 1.26.2 and is fixed in version 1.26.2. Red Hat has issued an important security advisory and released updates to address this vulnerability.

References

Community reviews

Loading reviews…