AZL-87275 CVE-2026-39832 affecting package podman 5.6.1-10

🗓️ 22 May 2026 04:16:22Reported by GoogleType

osv🔗 osv.dev👁 10 Views

Podman 5.6.1-9 strips restrict-destination constraints when forwarding keys to remote agents.

Reporter	Title	Published	Views	Family All 6060
RedhatCVE	CVE-2026-39832	5 Jun 202619:44	–	redhatcve
RedHat Linux	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions	8 Jul 202615:52	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: RHTAS 1.4.2 - CLI Stack Release	8 Jul 202615:46	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: podman security, bug fix, and enhancement update	9 Jul 202605:35	–	redhat
RedHat Linux	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions	9 Jul 202605:35	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: podman security, bug fix, and enhancement update	9 Jul 202607:38	–	redhat
RedHat Linux	golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions	9 Jul 202607:38	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: RHTAS 1.4.2 - Red Hat Trusted Artifact Signer Release	9 Jul 202611:43	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: RHTAS 1.4.2 - CLI Stack Release	9 Jul 202612:02	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.0 security, enhancement & bug fix update	9 Jul 202614:48	–	redhat

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-39832

20 Sep 2026 05:32Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.19.1

EPSS0.006

SSVC

podman key forwarding constraint stripping SSH agent restrict-destination remote agent