CVE-2019-10152

CVE-2019-10152 is a path traversal vulnerability affecting Podman versions prior to 1.4.0, as well as specific versions of openSUSE and libpod_project. An attacker who has already compromised a container can leverage this flaw to read or write arbitrary files on the host system when an administrator attempts to copy files to or from the compromised container. Rated as High severity with a CVSS score of 7.2, successful exploitation requires local access to a container, high attack complexity, and user interaction, leading to high confidentiality and integrity impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.