CVE-2026-57231

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-57231
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57231.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-57231
Aliases
Downstream
ALPINE (1)
ALSA (2)
AZL (1)
BELL (1)
CLSA (1)
DEBIAN (1)
MINI (3)
openSUSE (2)
RHSA (4)
RLSA (3)
SUSE (6)
UBUNTU (1)
Related
ALSA (2)
openSUSE (2)
SUSE (6)
Published
2026-06-26T16:29:02Z
Modified
2026-10-28T02:30:24Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Podman: Malformed Image can trick podman run into leaking host environment variables into the container
Details

Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-200",
        "CWE-668"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/57xxx/CVE-2026-57231.json"
}
References

Affected packages

Git / github.com/podman-container-tools/podman

Affected ranges

Type
GIT
Repo
https://github.com/podman-container-tools/podman
Events
Introduced
444a19cdd2e6108c75f6c1aadc1a2a9138a8bd73
Fixed
5431df23c742e5edea35bef34eed696f4db0106b
Introduced
d0c9bb1b49fb63826997342ad5ddb576bdf6e865
Fixed
6c431b73dbf8e4b20b778644d7a80caebdb75050
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:podman_project:podman:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.8.1"
                },
                {
                    "fixed": "5.8.4"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:podman_project:podman:6.0.0:rc1:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "6.0.0-rc1"
                },
                {
                    "last_affected": "6.0.0-rc1"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "range": [
                {
                    "fixed": "6c431b73dbf8e4b20b778644d7a80caebdb75050"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

6.*
6.0.0-rc1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57231.json"