# CVE-2025-6032

## Summary

- **CVE ID:** CVE-2025-6032
- **Severity:** HIGH
- **CVSS Score:** 8.3 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)
- **CWE:** CWE-295
- **Published:** Jun 24, 2025
- **Last Modified:** Aug 31, 2026

## Description

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

## Affected Products

- Unknown product (4.8.0)
- Red Hat — Red Hat Enterprise Linux 10 (6:5.4.0-12.el10_0)
- Red Hat — Red Hat Enterprise Linux 8 (8100020250625105344.afee755d)
- Red Hat — Red Hat Enterprise Linux 9 (5:5.4.0-12.el9_6)
- Red Hat — Red Hat Enterprise Linux 9.4 Extended Update Support (4:4.9.4-18.el9_4.2)
- Red Hat — Red Hat OpenShift Container Platform 4.16 (4:4.9.4-16.rhaos4.16.el9)
- Red Hat — Red Hat OpenShift Container Platform 4.16 (416.94.202507222002-0)
- Red Hat — Red Hat OpenShift Container Platform 4.17 (5:5.2.2-8.rhaos4.17.el9)
- Red Hat — Red Hat OpenShift Container Platform 4.17 (417.94.202507132309-0)
- Red Hat — Red Hat OpenShift Container Platform 4.18 (418.94.202507221927-0)
- Red Hat — Red Hat OpenShift Container Platform 4.18 (5:5.2.2-9.rhaos4.18.el9)
- Red Hat — Red Hat OpenShift Container Platform 4.19 (4.19.9.6.202507152218-0)
- Red Hat — Red Hat OpenShift Container Platform 4.19 (5:5.4.0-6.rhaos4.19.el9)
- Red Hat — Red Hat OpenShift Container Platform 4.20 (4.20.9.6.202509251656-0)
- Red Hat — Red Hat OpenShift Container Platform 4.16 (4:4.9.4-14.rhaos4.16.el8)
- Red Hat — Red Hat OpenShift Container Platform 4.17 (5:5.2.2-8.rhaos4.17.el8)

## References

- [CNA](https://access.redhat.com/errata/RHSA-2025:10295)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10549)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10550)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10551)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10668)
- [CNA](https://access.redhat.com/errata/RHSA-2025:11359)
- [CNA](https://access.redhat.com/errata/RHSA-2025:11363)
- [CNA](https://access.redhat.com/errata/RHSA-2025:11677)
- [CNA](https://access.redhat.com/errata/RHSA-2025:11681)
- [CNA](https://access.redhat.com/errata/RHSA-2025:15397)
- [CNA](https://access.redhat.com/errata/RHSA-2025:9726)
- [CNA](https://access.redhat.com/errata/RHSA-2025:9751)
- [CNA](https://access.redhat.com/errata/RHSA-2025:9766)
- [CNA](https://access.redhat.com/security/cve/CVE-2025-6032)
- [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2372501)
- [CNA](https://github.com/containers/podman/commit/726b506acc8a00d99f1a3a1357ecf619a1f798c3)
- [CNA](https://github.com/containers/podman/security/advisories/GHSA-65gg-3w2w-hr4h)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.48%
- **EPSS Percentile:** 40.3

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._