CVE-2022-27649

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.

• CWE-276
• CWE-276

• https://bugzilla.redhat.com/show_bug.cgi?id=2066568Issue Tracking, Third Party Advisory
• https://github.com/containers/podman/commit/aafa80918a245edcbdaceb1191d749570f1872d0Patch, Third Party Advisory
• https://github.com/containers/podman/security/advisories/GHSA-qvf8-p83w-v58jThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KDETHL5XCT6RZN2BBNOCEXRZ2W3SFU3/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J5WPM42UR6XIBQNQPNQHM32X7S4LJTRX/
• https://bugzilla.redhat.com/show_bug.cgi?id=2066568Issue Tracking, Third Party Advisory
• https://github.com/containers/podman/commit/aafa80918a245edcbdaceb1191d749570f1872d0Patch, Third Party Advisory
• https://github.com/containers/podman/security/advisories/GHSA-qvf8-p83w-v58jThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KDETHL5XCT6RZN2BBNOCEXRZ2W3SFU3/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J5WPM42UR6XIBQNQPNQHM32X7S4LJTRX/

Published

Apr 4, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27643This vulnerability allows network-adjacent attackers to exec…8.8
• CVE-2022-27644This vulnerability allows network-adjacent attackers to comp…8.8
• CVE-2022-27645This vulnerability allows network-adjacent attackers to bypa…8.8
• CVE-2022-27646This vulnerability allows network-adjacent attackers to exec…8.8
• CVE-2022-27647This vulnerability allows network-adjacent attackers to exec…8
• CVE-2022-27648This vulnerability allows remote attackers to execute arbitr…7.8
• CVE-2022-2765A vulnerability was found in SourceCodester Company Website …9.8
• CVE-2022-27650A flaw was found in crun where containers were incorrectly s…7.5
• CVE-2022-27651A flaw was found in buildah where containers were incorrectl…6.8
• CVE-2022-27652A flaw was found in cri-o, where containers were incorrectly…5.3
• CVE-2022-27653A vulnerability has been identified in Simcenter Femap (All …7.8
• CVE-2022-27654When a user opens a manipulated Photoshop Document (.psd, 2d…6.5