CVE-2018-10856: Libpod Project Libpod

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container.

Affected products

• Libpod Project Libpod: before 0.6.1 (fixed in 0.6.1)

Published 2018-07-03. Last modified 2026-06-17.