CVE-2021-20199: Origin Validation Error in github.com/containers/podman/v3
Summary
CVE-2021-20199: Podman Origin Validation Error. Affects github.com/containers/podman/v3 versions < 3.0.0. Fixed in 3.0.0. How to fix ↓
Also tracked for
- libpod · Debian:11
The same CVE-2021-20199 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
github.com/containers/podman/v3 is a Go package that provides a container runtime and management tool called Podman. It allows users to run and manage containers without requiring a full container orchestration platform. Podman is widely used in various environments to deploy and manage containerized applications.
Vulnerability Detail
The vulnerability, known as Origin Validation Error, affects Podman versions from 1.8.0 to 3.0.0. When running rootless containers with Podman, all traffic is received with a source IP address of 127.0.0.1, including traffic from remote hosts. This can be exploited by attackers to bypass authentication and gain unauthorized access to containerized applications that trust localhost (127.0.0.1) connections by default. The impact of this vulnerability can be significant, as it allows attackers to potentially compromise the security and integrity of containerized applications.
How To Fix
Latest published version: v3.4.7 as of 22 Oct 2026
go get github.com/containers/podman/v3@v3.4.7Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
3.0.0
This is the first release that contains the fix.
go get github.com/containers/podman/v3@v3.0.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, as a general best practice, it is recommended to implement additional authentication mechanisms and access controls within containerized applications to mitigate the risk of unauthorized access.
Conclusion
The Origin Validation Error vulnerability in github.com/containers/podman/v3 can lead to unauthorized access and potential security compromises in containerized applications. It is crucial to upgrade to Podman version 3.0.0 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for github.com/containers/podman/v3 →
FAQ
The vulnerability allows attackers to bypass authentication and gain unauthorized access to containerized applications that trust localhost connections. This can lead to potential data breaches, unauthorized modifications, and other security compromises.
Podman versions from 1.8.0 to 3.0.0 are affected by this vulnerability.
Yes, rootless containers running with Podman are more vulnerable to this issue as all traffic is received with a source IP address of 127.0.0.1, including traffic from remote hosts.
Yes, upgrading to Podman version 3.0.0 or later will fix this vulnerability.
Implement additional authentication mechanisms and access controls within your containerized applications to mitigate the risk of unauthorized access.
References
Related vulnerabilities
Recent vulnerabilities recorded for github.com/containers/podman/v3.
