---
title: "Discussion on \"Podman Checkpoint CVE: How a Sandbox Bypass Works\" | Hashnode"
description: "Discussion on \"Podman Checkpoint CVE: How a Sandbox Bypass Works\". Originally published on DevToolHub.\n\nIf you run Podman in production, a container image can now disable the sandbox restrictions you explicitly asked for, just by carrying one annotation. CVE-2026-946"
url: "https://hashnode.com/posts/podman-checkpoint-cve-how-a-sandbox-bypass-works/6ae88af64e8e71276ce70c03"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Podman Checkpoint CVE: How a Sandbox Bypass Works](https://devtoolhub.hashnode.dev/podman-checkpoint-cve-how-a-sandbox-bypass-works?utm_source=hashnode&utm_medium=feed)

Originally published on DevToolHub. If you run Podman in production, a container image can now disable the sandbox restrictions you explicitly asked for, just by carrying one annotation. CVE-2026-946

Nov 2 · 7 min read · devtoolhub.hashnode.dev  
Read the article

-   [#podman](https://hashnode.com/tag/podman)
-   [#security](https://hashnode.com/tag/security)
-   [#devops](https://hashnode.com/tag/devops)
-   [#docker](https://hashnode.com/tag/docker)

## Written by

[Amaresh Pelleti](https://hashnode.com/@amareswer)

@amareswer

  
[View profile](https://hashnode.com/@amareswer)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.