Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:88202 advisory.

    * podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-     requested sandboxing - by image annotation (CVE-2026-94603)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:88202 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-     requested sandboxing - by image annotation (CVE-2026-94603)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-88202 advisory.

    [5.8.2-10.0.1]
    - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]

    [7:5.8.2-10]
    - update to the latest upstream commit bd9083e0 - Resolves: RHEL-271981

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792206152 advisory.

  - Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker     to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length     compressed files. (CVE-2022-30631)

  - Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC     5322. (CVE-2026-42499)

  - Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats     an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and     silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-     controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are     not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions     5.8.8 and 6.1.3. (CVE-2026-94603)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats
    an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and
    silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-
    controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are
    not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions
    5.8.8 and 6.1.3. (CVE-2026-94603)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bb4528f4-c5d4-11f1-8c8c-ac5afc632ba3 advisory.

    The Podman developers report:
    This release addresses (CVE-2026-94603), where a               podman run on a checkpoint image (any image with the               io.podman.annotations.checkpoint.runtime.name annotation) could               disable all sandboxing, including sandboxing specified by the               user, when the container was created.
    Removed support for checkpoint images in podman run due to               serious security concerns with the different security models of               running images and running checkpoints. Checkpoints ignore               user-specified security configuration and are very difficult to               run safely.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command,
    they can create files on the host machine with the privileges of the user running Podman. (CVE-2025-11395)

  - A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout
    header (e.g. victim/.wh.) can cause the extraction destination directory to be replaced with an arbitrary
    file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or ApplyUncompressedLayer.
    (CVE-2026-79699)

  - A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a
    crafted tar archive containing malicious symlinks can escape the target extraction directory and create
    files outside the intended destination. Buildah itself uses chroot hardening and is not affected.
    (CVE-2026-79705)

  - Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats
    an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and
    silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-
    controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are
    not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions
    5.8.8 and 6.1.3. (CVE-2026-94603)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats     an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and     silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-     controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are     not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions     5.8.8 and 6.1.3. (CVE-2026-94603)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
371433	AlmaLinux 10 : podman (ALSA-2026:88202)	Nessus	Alma Linux Local Security Checks	Local	critical
370928	RHEL 10 : podman (RHSA-2026:88202)	Nessus	Red Hat Local Security Checks	Local	critical
370891	Oracle Linux 10 : podman (ELSA-2026-88202)	Nessus	Oracle Linux Local Security Checks	Local	critical
366756	AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792206152)	Nessus	Alma Linux Local Security Checks	Local	high
474699	SCA: security update for github.com/containers/podman/v4, github.com/containers/podman/v5, go.podman.io/podman/v6 (GHSA-2cvf-wqm6-wr9g)	Tenable Cloud Security	SCA Checks	Local	critical
474699	SCA: security update for github.com/containers/podman/v4, github.com/containers/podman/v5, go.podman.io/podman/v6 (GHSA-2cvf-wqm6-wr9g)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical
365107	FreeBSD : podman -- vulnerabilities (bb4528f4-c5d4-11f1-8c8c-ac5afc632ba3)	Nessus	FreeBSD Local Security Checks	Local	critical
448495	Alpine: multiple podman packages: security update to 5.8.8-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	critical
448495	Alpine: multiple podman packages: security update to 5.8.8-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	critical
351174	Linux Distros Unpatched Vulnerability : CVE-2026-94603	Nessus	Misc.	Local	critical

Detections

Analytics

CVE-2026-94603

critical

Tenable Plugins

critical

critical

critical

high

critical

critical

critical

critical

critical

critical