Threats tagged 'ghsa-q6r4-3wmg-fwcq'

CVE-2026-55686 is a vulnerability in Podman versions prior to 5.7.1 where a malicious container image using a WORKDIR path containing a symlink can cause directory creation or ownership modification on the host filesystem. This occurs due to symlink traversal during container startup, potentially allowing a container to affect host directories such as /var/BREAKOUT. The issue was fixed in Podman 5.7.1.