Description

A flaw was found in Podman Desktop. The isAccessAllowed() unconditionally returns true, enabling malicious extensions to impersonate any user, hijack authentication sessions and access sensitive resources without authorization. This authentication bypass allows any extension to completely circumvent permission checks and gain unauthorized access to all authentication sessions.

Mitigation

Aliases