Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-41568

Опубликовано: 12 июн. 2026
Источник: nvd
CVSS3: 6.1
EPSS Низкий

Описание

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitrary absolute paths on the host filesystem. This issue has been patched in Docker Engine version 29.5.1 and Moby Daemon version 2.0.0-beta.14.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:docker:engine:*:*:*:*:*:*:*:*
Версия до 29.5.1 (исключая)
cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*
Версия до 28.5.2 (включая)
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta0:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta1:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta10:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta11:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta12:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta13:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta3:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta4:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta5:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta6:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta7:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta8:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta9:*:*:*:*:*:*

EPSS

Процентиль: 1%
0.00108
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-81

Связанные уязвимости

ubuntu логотип

CVE-2026-41568

CVSS3: 6.1
ubuntu
5 месяцев назад

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitrary absolute paths on the host filesystem. This issue has been patched in Docker Engine version 29.5.1 and Moby Daemon version 2.0.0-beta.14.

redhat логотип

CVE-2026-41568

CVSS3: 3.9
redhat
5 месяцев назад

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitrary absolute paths on the host filesystem. This issue has been patched in Docker Engine version 29.5.1 and Moby Daemon version 2.0.0-beta.14.

debian логотип

CVE-2026-41568

CVSS3: 6.1
debian
5 месяцев назад

Moby is an open source container framework. In Docker Engine prior to ...

redos логотип

ROS-20260625-80-0026

CVSS3: 6.1
redos
5 месяцев назад

Уязвимость docker-ce

redos логотип

ROS-20260625-73-0025

CVSS3: 6.1
redos
5 месяцев назад

Уязвимость docker-ce

EPSS

Процентиль: 1%
0.00108
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-81