Is CVE-2026-34045 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-34045 being exploited in the wild.

How severe is CVE-2026-34045?

High severity, with a CVSS score of 8.2, published 7 April 2026.

Which products and versions are affected?

Red Hat Podman Desktop < 1.26.2; Red Hat Red Hat Enterprise Linux 10 10.1.

Is there a fix for CVE-2026-34045?

A patch was published on 2026-04-07: Fixed in version 1.26.2 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-34045 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-34045?

Check whether you run Linuxfoundation Podman Desktop. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-34045: Podman Desktop DoS and information disclosure in WebView server

Q: Is there a fix for CVE-2026-34045?

A patch was published on 2026-04-07: Fixed in version 1.26.2 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-34045 attacked?

It is attacked over the network, in a network appliance.

Q: Am I affected by CVE-2026-34045?

Check whether you run Linuxfoundation Podman Desktop. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-34045 · Severity: high · CVSS 8.2 · Published 2026-04-07

Podman Desktop is a graphical application used by developers to manage containers and Kubernetes environments. A security flaw allows remote attackers to crash the application or freeze the entire computer by flooding an unprotected internal web server with connections. Additionally, the application may leak sensitive system information, such as internal file paths and Windows usernames, which could be used to plan further attacks.

Vendors: Linuxfoundation.

Quick answers

Is CVE-2026-34045 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-34045 being exploited in the wild.
How severe is CVE-2026-34045?: High severity, with a CVSS score of 8.2, published 7 April 2026.
Which products and versions are affected?: Red Hat Podman Desktop < 1.26.2; Red Hat Red Hat Enterprise Linux 10 10.1.
Is there a fix for CVE-2026-34045?: A patch was published on 2026-04-07: Fixed in version 1.26.2 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-34045 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-34045?: Check whether you run Linuxfoundation Podman Desktop. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

Podman Desktop's WebView HTTP server, listening on port 44000, was found to bind to all network interfaces (0.0.0.0) without authentication, connection limits, or request timeouts. A remote attacker can exploit this by initiating a connection flood (Slowloris-style attack), exhausting file descriptors and kernel memory, which leads to application crashes or full host freezes. Furthermore, the server's verbose error responses disclose internal file paths and, on Windows systems, the current user's username. The vulnerability is resolved in version 1.26.2 by binding the server to the loopback interface (127.0.0.1) and implementing resource limits.

Affected products

Red Hat Podman Desktop < 1.26.2
Red Hat Red Hat Enterprise Linux 10 10.1

Timeline

2026-04-07: disclosed
2026-04-07: advisory
2026-04-07: patched: Fixed in version 1.26.2

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.