CVE-2025-9566

CVE-2025-9566 is a high-severity vulnerability affecting Podman versions 4.0.0 through 5.6.0, where the 'kube play' command can be leveraged by an authenticated attacker to overwrite host files. This occurs when a Kubernetes manifest includes a Secret or ConfigMap volume mount containing a symbolic link to a host file path. While the attacker can control which file is overwritten, they cannot control the content written to it, leading to potential integrity and availability impacts. The CVSS score is 8.1 (HIGH), indicating a network-exploitable vulnerability with low attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.