Bundesamt für Sicherheit in der Informationstechnik Open Source · Podman Desktop: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen
Affects Bundesamt für Sicherheit in der Informationstechnik Open SourceSource GCVE Database
Not known to be exploited : upgrade to 1.26.2 soon.
Data as of 27 Oct 2026, 01:53 UTC
Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
- Patch
- Available – fixed in 1.26.2
Exploitation evidence
Disclosed: evidence found.
CVE published 7 Apr 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Bundesamt für Sicherheit in der Informationstechnik Open Source to 1.26.2.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Bundesamt für Sicherheit in der Informationstechnik Open Source | Affected
| Fixed in
|
AI-suggested
A fix is available in Podman Desktop version 1.26.2. Users and administrators should update affected installations to version 1.26.2 or later. Red Hat provides updated packages and detailed instructions for applying the update in their advisory. No additional mitigation steps are indicated beyond applying the official patch.
Description
CVE-2026-34045 is a vulnerability in Podman Desktop, an open-source graphical tool for managing containers and Kubernetes environments on the desktop. The flaw involves an unauthenticated HTTP server that can be exploited to cause denial of service and information disclosure. The issue affects versions prior to 1.26.2 and is fixed in version 1.26.2. Red Hat has issued an important security advisory and released updates to address this vulnerability.
References
- wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0992.json (opens in a new tab)
- wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0992 (opens in a new tab)
- github.com/podman-desktop/podman-desktop/security/advisories/GHSA-2q88-39rh-gxvv (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:13867 (opens in a new tab)