There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-introduced: v4.0.0 Upstream-version-fixed: v5.6.1

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:15901 advisory.

    * podman: Podman kube play command may overwrite host files (CVE-2025-9566)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:15900 advisory.

    * podman: Podman kube play command may overwrite host files (CVE-2025-9566)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16515 advisory.

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo,     and runc.

    Security Fix(es):

    * podman: Podman kube play command may overwrite host files (CVE-2025-9566)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16482 advisory.

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo,     and runc.

    Security Fix(es):

    * podman: Podman kube play command may overwrite host files (CVE-2025-9566)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16481 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * podman: Podman kube play command may overwrite host files (CVE-2025-9566)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16480 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * podman: Podman kube play command may overwrite host files (CVE-2025-9566)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16488 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * podman: Podman kube play command may overwrite host files (CVE-2025-9566)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-15904 advisory.

    - fixes 'CVE-2025-9566 container-tools:rhel8/podman: Podman kube play command may overwrite host files     [rhel-8.10.z]'

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:15904 advisory.

    * podman: Podman kube play command may overwrite host files (CVE-2025-9566)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-15901 advisory.

    - fixes 'CVE-2025-9566 podman: Podman kube play command may overwrite host files [rhel-9.6.z]'

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-15900 advisory.

    - fixes 'CVE-2025-9566 podman: Podman kube play command may overwrite host files [rhel-9.6.z]'

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15904 advisory.

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo,     and runc.

    Security Fix(es):

    * podman: Podman kube play command may overwrite host files (CVE-2025-9566)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15901 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * podman: Podman kube play command may overwrite host files (CVE-2025-9566)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15900 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * podman: Podman kube play command may overwrite host files (CVE-2025-9566)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-19f7dd07d9 advisory.

    Security update for CVE-2025-9566

    Automatic update for containers-common-0.64.2-1.fc42, podman-5.6.1-1.fc42, buildah-1.41.4-1.fc42.

    ##### **Changelog for containers-common**

    ```
    * Wed Sep 03 2025 Packit <hello@packit.dev> - 5:0.64.2-1
    - Update to 0.64.2 upstream release

    ```

    ##### **Changelog for podman**

    ```
    * Thu Sep 04 2025 Packit <hello@packit.dev> - 5:5.6.1-1
    - Update to 5.6.1 upstream release

    ```

    ##### **Changelog for buildah**

    ```
    * Thu Sep 04 2025 Packit <hello@packit.dev> - 2:1.41.4-1
    - Update to 1.41.4 upstream release

    ```


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-b93734b6b8 advisory.

    Security fix for CVE-2025-9566

    Automatic update for containers-common-0.64.2-1.fc43, buildah-1.41.4-1.fc43, podman-5.6.1-1.fc43.

    ##### **Changelog for containers-common**

    ```
    * Wed Sep 03 2025 Packit <hello@packit.dev> - 5:0.64.2-1
    - Update to 0.64.2 upstream release

    ```

    ##### **Changelog for buildah**

    ```
    * Thu Sep 04 2025 Packit <hello@packit.dev> - 2:1.41.4-1
    - Update to 1.41.4 upstream release

    ```

    ##### **Changelog for podman**

    ```
    * Thu Sep 04 2025 Packit <hello@packit.dev> - 5:5.6.1-1
    - Update to 5.6.1 upstream release

    ```


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-f9e142a4b0 advisory.

    Security fix for CVE-2025-9566

    Automatic update for containers-common-0.64.2-1.fc41, buildah-1.41.4-1.fc41, podman-5.6.1-1.fc41.

    ##### **Changelog for containers-common**

    ```
    * Wed Sep 03 2025 Packit <hello@packit.dev> - 5:0.64.2-1
    - Update to 0.64.2 upstream release

    ```

    ##### **Changelog for buildah**

    ```
    * Thu Sep 04 2025 Packit <hello@packit.dev> - 2:1.41.4-1
    - Update to 1.41.4 upstream release

    ```

    ##### **Changelog for podman**

    ```
    * Thu Sep 04 2025 Packit <hello@packit.dev> - 5:5.6.1-1
    - Update to 5.6.1 upstream release

    ```


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files     when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic     link to a host file path. In a successful attack, the attacker can only control the target file to be     overwritten but not the content to be written into the file. Binary-Affected: podman Upstream-version-     introduced: v4.0.0 Upstream-version-fixed: v5.6.1 (CVE-2025-9566)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
269232	RockyLinux 10 : podman (RLSA-2025:15901)	Nessus	Rocky Linux Local Security Checks	high
266065	AlmaLinux 9 : podman (ALSA-2025:15900)	Nessus	Alma Linux Local Security Checks	high
265802	RHEL 8 : container-tools:rhel8 (RHSA-2025:16515)	Nessus	Red Hat Local Security Checks	high
265783	RHEL 8 : container-tools:rhel8 (RHSA-2025:16482)	Nessus	Red Hat Local Security Checks	high
265781	RHEL 9 : podman (RHSA-2025:16481)	Nessus	Red Hat Local Security Checks	high
265780	RHEL 9 : podman (RHSA-2025:16480)	Nessus	Red Hat Local Security Checks	high
265779	RHEL 9 : podman (RHSA-2025:16488)	Nessus	Red Hat Local Security Checks	high
265337	Oracle Linux 8 : container-tools:rhel8 (ELSA-2025-15904)	Nessus	Oracle Linux Local Security Checks	high
265326	AlmaLinux 8 : container-tools:rhel8 (ALSA-2025:15904)	Nessus	Alma Linux Local Security Checks	high
265097	Oracle Linux 10 : podman (ELSA-2025-15901)	Nessus	Oracle Linux Local Security Checks	high
265066	Oracle Linux 9 : podman (ELSA-2025-15900)	Nessus	Oracle Linux Local Security Checks	high
264896	RHEL 8 : container-tools:rhel8 (RHSA-2025:15904)	Nessus	Red Hat Local Security Checks	high
264872	RHEL 10 : podman (RHSA-2025:15901)	Nessus	Red Hat Local Security Checks	high
264871	RHEL 9 : podman (RHSA-2025:15900)	Nessus	Red Hat Local Security Checks	high
264441	Fedora 42 : buildah / containers-common / podman (2025-19f7dd07d9)	Nessus	Fedora Local Security Checks	high
264427	Fedora 43 : buildah / containers-common / podman (2025-b93734b6b8)	Nessus	Fedora Local Security Checks	high
261824	Fedora 41 : buildah / containers-common / podman (2025-f9e142a4b0)	Nessus	Fedora Local Security Checks	high
261583	Linux Distros Unpatched Vulnerability : CVE-2025-9566	Nessus	Misc.	high

Detections

Analytics

CVE-2025-9566

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high