Podman Desktop Authorization Issue Vulnerability

Podman Desktop is an open-source container management tool developed by podman-desktop. Versions of Podman Desktop prior to 1.25.1 contained an authorization vulnerability. This vulnerability stemmed from the isAccessAllowed function returning true unconditionally, which could lead to...

PT-2026-5796

Уязвимость функции isAccessAllowed программного средства управления и запуска OCI-контейнеров Podman связана с недостатками процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие ограничения безопасности и получить несанкционированный...

CVE-2026-24835: Improper Authorization

Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnerability in Podman Desktop prior to version 1.25.1 allows any extension to completely circumvent permission checks and gain unauthorized access to all authentication sessions. The...

Default configuration

Keystone is an open source headless CMS for Node.js — built with GraphQL and React. When ui.isAccessAllowed is set as undefined, the adminMeta GraphQL query is publicly accessible no session required. This is different to the behaviour of the default AdminUI middleware, which by default will only...