CVE-2025-4953

CVE-2025-4953 describes a flaw in Podman where data written to RUN --mount=type=bind mounts during a build is not properly discarded. This can result in sensitive files created within the container being exposed in the temporary build context directory on the host system. The vulnerability has a CVSS score of 7.4 (High), indicating a high impact on confidentiality and integrity, with a network attack vector and high attack complexity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.