CVE-2026-57231

{
  "id": "CVE-2026-57231",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-26T17:16:34.697",
  "lastModified": "2026-10-25T17:10:00.197",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environment variable with just a key and no value can trick podman into passing that variable from the host into the container. This is made worse by the fact that using an asterisk (*) will cause podman to pass all host variables into the container. So essentially a malicious image can exfiltrate all podman environment variables that are set in the session from where the container is launched. This vulnerability is fixed in 5.8.4 and 6.0.0."
    },
    {
      "lang": "es",
      "value": "Podman es una herramienta para gestionar contenedores OCI y pods. Desde la versión 1.8.1 hasta la 5.8.4, una imagen de contenedor que contiene una variable de entorno con solo una clave y sin valor puede engañar a Podman para que pase esa variable del host al contenedor. Esto se agrava por el hecho de que usar un asterisco (*) hará que Podman pase todas las variables del host al contenedor. Así, esencialmente, una imagen maliciosa puede exfiltrar todas las variables de entorno de Podman que están configuradas en la sesión desde donde se lanza el contenedor. Esta vulnerabilidad está corregida en las versiones 5.8.4 y 6.0.0."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "podman-container-tools",
          "product": "podman",
          "versions": [
            {
              "version": ">= 1.8.1, < 5.8.4",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-27T02:41:47.348825Z",
          "id": "CVE-2026-57231",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        },
        {
          "lang": "en",
          "value": "CWE-668"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podman_project:podman:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "1.8.1",
              "versionEndExcluding": "5.8.4",
              "matchCriteriaId": "C7D99B4B-8C58-47AD-BB57-A32E3044440F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:podman_project:podman:6.0.0:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "B8A3C450-FDBE-4DAD-A476-D09322BAA9FA"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/podman-container-tools/podman/commit/6c431b73dbf8e4b20b778644d7a80caebdb75050",
      "source": "[email protected]",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-4hq8-gpf5-8p68",
      "source": "[email protected]",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ]
    }
  ]
}