Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-41568

Опубликовано: 12 июн. 2026
Источник: nvd
CVSS3: 6.1
EPSS Низкий

Описание

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitrary absolute paths on the host filesystem. This issue has been patched in Docker Engine version 29.5.1 and Moby Daemon version 2.0.0-beta.14.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:docker:engine:*:*:*:*:*:*:*:*
Версия до 29.5.1 (исключая)
cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*
Версия до 28.5.2 (включая)
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta0:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta1:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta10:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta11:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta12:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta13:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta3:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta4:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta5:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta6:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta7:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta8:*:*:*:*:*:*
cpe:2.3:a:mobyproject:moby\/v2:2.0.0:beta9:*:*:*:*:*:*

EPSS

Процентиль: 1%
0.00108
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-81

Связанные уязвимости

ubuntu логотип

CVE-2026-41568

CVSS3: 6.1
ubuntu
около 2 месяцев назад

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitrary absolute paths on the host filesystem. This issue has been patched in Docker Engine version 29.5.1 and Moby Daemon version 2.0.0-beta.14.

redhat логотип

CVE-2026-41568

CVSS3: 3.9
redhat
около 2 месяцев назад

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitrary absolute paths on the host filesystem. This issue has been patched in Docker Engine version 29.5.1 and Moby Daemon version 2.0.0-beta.14.

debian логотип

CVE-2026-41568

CVSS3: 6.1
debian
около 2 месяцев назад

Moby is an open source container framework. In Docker Engine prior to ...

redos логотип

ROS-20260625-73-0025

CVSS3: 6.1
redos
около 1 месяца назад

Уязвимость docker-ce

github логотип

GHSA-vp62-88p7-qqf5

CVSS3: 6.1
github
3 месяца назад

Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap

EPSS

Процентиль: 1%
0.00108
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-81