CVE-2025-11395

Description

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

CVSS Vector

References

• https://access.redhat.com/security/cve/CVE-2025-11395
• https://bugzilla.redhat.com/show_bug.cgi?id=2402034