CVE-2023-0778: Podman Project Podman

Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.

Affected products

• Podman Project Podman: affected versions not specified
• Red Hat Enterprise Linux: version 8.0 only; version 9.0 only

Published 2023-03-27. Last modified 2026-06-17.