https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 07:22:01 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-01230 bdu:2026-01230 https://cve.radiocsirt.org/vuln/bdu:2026-01230 https://cve.radiocsirt.org/vuln/euvd-2026-266884 EUVD-2026-266884 https://cve.radiocsirt.org/vuln/euvd-2026-266884 https://cve.radiocsirt.org/vuln/fkie_cve-2026-24835 <p>Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnerability in Podman Desktop prior to version 1.25.1 allows any extension to completely circumvent permission checks and gain unauthorized access to all authentication sessions. The `isAccessAllowed()` function unconditionally returns `true`, enabling malicious extensions to impersonate any user, hijack authentication sessions, and access sensitive resources without authorization. This vulnerability affects all versions of Podman Desktop. Version 1.25.1 contains a patch for the issue.</p> <p>Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnerability in Podman Desktop prior to version 1.25.1 allows any extension to completely circumvent permission checks and gain unauthorized access to all authentication sessions. The `isAccessAllowed()` function unconditionally returns `true`, enabling malicious extensions to impersonate any user, hijack authentication sessions, and access sensitive resources without authorization. This vulnerability affects all versions of Podman Desktop. Version 1.25.1 contains a patch for the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-24835 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0252 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Podman Desktop ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Podman Desktop ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0252