StackRadar

CVE-2026-94603

Critical

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Critical
worst across findings
CVSS
10.0
base score, highest
EPSS
0.009
60th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1
of 18,178 indexed, latest versions
Container images
2
deployed by those charts
Fix available
1 of 1
affected package

Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

Carried by container images the latest versions of 1 of 18,178 indexed charts deploy, on 2 images.

Affected packageAffected versionsFixed inImages
go.podman.io/podman/v6golangv6.0.26.1.32
OSV records
GHSA-2cvf-wqm6-wr9g

Charts affected

1 by stars
ChartLatestAffected imagesRadar Score
falcofalcosecurity9.2.02 of 3See more

falco falcosecurity 9.2.0

2 of the 3 container images this version deploys carry CVE-2026-94603.

Container imageDigestPackageFixed in
falcosecurity/falco:0.45.0788f1129c542
go.podman.io/podman/v6@v6.0.2
6.1.3
falcosecurity/falco-driver-loader:0.45.0d7d287d4dcee
go.podman.io/podman/v6@v6.0.2
6.1.3

Open the chart page →

4,106

Container images carrying it

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
falcosecurity/falco:0.45.0788f1129c542
go.podman.io/podman/v6@v6.0.2
6.1.3
1
falcosecurity/falco-driver-loader:0.45.0d7d287d4dcee
go.podman.io/podman/v6@v6.0.2
6.1.3
1

syft 1.42.1 · advisories as of 19 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.