CVE-2025-4953: Red Hat Enterprise Linux 10

High severity, CVSS 7.4. EPSS: 0.6% chance of exploitation in the next 30 days.

A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible.

Affected products

  • Red Hat Red Hat Enterprise Linux 10
  • Red Hat Red Hat Enterprise Linux 8: before 8100020250911075811.afee755d (fixed in 8100020250911075811.afee755d)
  • Red Hat Red Hat Enterprise Linux 9
  • Red Hat Red Hat Openshift Container Platform 4
  • Red Hat Red Hat Openshift Container Platform 4.12: before 3:4.2.0-15.rhaos4.12.el9 (fixed in 3:4.2.0-15.rhaos4.12.el9); before 412.86.202601061735-0 (fixed in 412.86.202601061735-0)
  • Red Hat Red Hat Openshift Container Platform 4.13: before 1:1.29.1-5.rhaos4.13.el9 (fixed in 1:1.29.1-5.rhaos4.13.el9); before 3:2.1.7-5.rhaos4.13.el8 (fixed in 3:2.1.7-5.rhaos4.13.el8); before 1:1.4.0-5.rhaos4.13.el8 (fixed in 1:1.4.0-5.rhaos4.13.el8); before 0:1.26.5-26.rhaos4.13.giteb3d487.el8 (fixed in 0:1.26.5-26.rhaos4.13.giteb3d487.el8); before 0:1.26.0-7.el8 (fixed in 0:1.26.0-7.el8); before 0:2.2.24-5.rhaos4.13.el8 (fixed in 0:2.2.24-5.rhaos4.13.el8); …
  • Red Hat Red Hat Openshift Container Platform 4.14: before 414.92.202512031525-0 (fixed in 414.92.202512031525-0)
  • Red Hat Red Hat Openshift Container Platform 4.15: before 415.92.202512100122-0 (fixed in 415.92.202512100122-0)
  • Red Hat Red Hat Openshift Container Platform 4.16: before 4:4.9.4-16.rhaos4.16.el8 (fixed in 4:4.9.4-16.rhaos4.16.el8); before 416.94.202512030118-0 (fixed in 416.94.202512030118-0)
  • Red Hat Red Hat Openshift Container Platform 4.17: before 417.94.202511260612-0 (fixed in 417.94.202511260612-0)
  • Red Hat Red Hat Openshift Container Platform 4.18: before 5:5.2.2-2.rhaos4.18.el8 (fixed in 5:5.2.2-2.rhaos4.18.el8); before 418.94.202512022246-0 (fixed in 418.94.202512022246-0)

Published 2025-09-16. Last modified 2026-09-01.