Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792206152 advisory.

  - Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats     an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and     silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-     controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are     not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions     5.8.8 and 6.1.3. (CVE-2026-94603)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats
    an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and
    silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-
    controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are
    not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions
    5.8.8 and 6.1.3. (CVE-2026-94603)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bb4528f4-c5d4-11f1-8c8c-ac5afc632ba3 advisory.

    The Podman developers report:
    This release addresses (CVE-2026-94603), where a               podman run on a checkpoint image (any image with the               io.podman.annotations.checkpoint.runtime.name annotation) could               disable all sandboxing, including sandboxing specified by the               user, when the container was created.
    Removed support for checkpoint images in podman run due to               serious security concerns with the different security models of               running images and running checkpoints. Checkpoints ignore               user-specified security configuration and are very difficult to               run safely.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command,
    they can create files on the host machine with the privileges of the user running Podman. (CVE-2025-11395)

  - A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout
    header (e.g. victim/.wh.) can cause the extraction destination directory to be replaced with an arbitrary
    file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or ApplyUncompressedLayer.
    (CVE-2026-79699)

  - A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a
    crafted tar archive containing malicious symlinks can escape the target extraction directory and create
    files outside the intended destination. Buildah itself uses chroot hardening and is not affected.
    (CVE-2026-79705)

  - Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats
    an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and
    silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-
    controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are
    not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions
    5.8.8 and 6.1.3. (CVE-2026-94603)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats     an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and     silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-     controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are     not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions     5.8.8 and 6.1.3. (CVE-2026-94603)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
366756	AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc (ALMALINUX9.2:CLSA-2026:1792206152)	Nessus	Alma Linux Local Security Checks	Local	critical
474699	SCA: security update for github.com/containers/podman, go.podman.io/podman/v6 (GHSA-2cvf-wqm6-wr9g)	Tenable Cloud Security	SCA Checks	Local	critical
474699	SCA: security update for github.com/containers/podman, go.podman.io/podman/v6 (GHSA-2cvf-wqm6-wr9g)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical
365107	FreeBSD : podman -- vulnerabilities (bb4528f4-c5d4-11f1-8c8c-ac5afc632ba3)	Nessus	FreeBSD Local Security Checks	Local	critical
448495	Alpine: multiple podman packages: security update to 5.8.8-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	critical
448495	Alpine: multiple podman packages: security update to 5.8.8-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	critical
351174	Linux Distros Unpatched Vulnerability : CVE-2026-94603	Nessus	Misc.	Local	critical

Detections

Analytics

CVE-2026-94603

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical