CVE-2025-4953: Insecure Temporary File Permissions in Podman
Summary
CVE-2025-4953: Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman. Affected versions are not published. No fix is published. How to fix ↓
Also tracked for
- github.com/containers/podman/v5 · Go
- podman · Debian:13
The same CVE-2025-4953 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Podman is an open-source container management tool that allows users to manage containers and images without requiring a daemon. It is designed to be a drop-in replacement for Docker, providing similar functionality with a focus on security and ease of use. However, a recent vulnerability has been identified that affects multiple versions of Podman, specifically related to the creation of temporary files with insecure permissions, potentially exposing sensitive data.
Vulnerability Detail
The vulnerability arises from Podman's method of creating temporary files without properly securing their permissions. This can lead to unauthorized access to these files by other users on the system, which may contain sensitive information. The issue affects all versions of Podman from its inception, making it critical for users to address this vulnerability promptly to avoid potential data breaches.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can manually adjust the permissions of the temporary files created by Podman to restrict access. This can be done using the following command in a Unix-like environment: 'chmod 600 /path/to/tempfile'. However, this is not a permanent solution and updating the package is strongly advised.
Conclusion
The CVE-2025-4953 vulnerability in Podman highlights a significant security risk due to the creation of temporary files with insecure permissions. Users are strongly encouraged to update to the latest version of Podman to mitigate this risk and protect sensitive data.
See every vulnerability recorded for github.com/containers/podman →
FAQ
CVE-2025-4953 is a vulnerability in Podman that allows the creation of temporary files with insecure permissions, potentially exposing sensitive data.
All versions of Podman from its inception are affected by this vulnerability.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
If an immediate update is not possible, consider adjusting the permissions of temporary files as a temporary workaround.
More information can be found in the official vulnerability report at https://pkg.go.dev/vuln/GO-2025-3961.
Related vulnerabilities
Recent vulnerabilities recorded for github.com/containers/podman.
