All vulnerabilities

Servers and applications

CVE-2021-20188

A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abused by a low-privileged user inside the container to access any other file in the container, even if owned by the root user inside the container. It does not allow to directly escape the container, though being a privileged container means…

Severity
High 7.0
Published
11 Feb 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.7.0
Sources
NVD

Affected software

SoftwareAffected versions
PodmanServers and applications · cpe:a:podman_project:podman
  • Every version before 1.7.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-20188
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-20188