If you run Podman in production, a container image can now disable the sandbox restrictions you explicitly asked for, just by carrying one annotation. CVE-2026-94603 is a podman checkpoint handling bug that tricks podman run into treating an ordinary image… Read morePodman Checkpoint CVE: How a Sandbox Bypass Works