A vulnerability in Podman allows an attacker to cause a Denial of Service (DoS) by supplying a container image with crafted metadata labels. Podman's auto-update mechanism trusts these labels to decide which system services to restart. If a user runs such a malicious container and auto-update processes it, arbitrary systemd services may be restarted with the user's privileges, potentially shutting down the host system if Podman runs with administrative rights. The vulnerability requires user interaction to pull and run an untrusted container image. In default Red Hat Enterprise Linux configurations, the auto-update timer is disabled, and rootless containers have limited systemd control, reducing risk.