CVE-2026-41567

EUVD-2026-34779

05.06.2026, 02:17

Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archive is uploaded to a container via `PUT /containers/{id}/archive` or piped through `docker cp -`, the daemon resolves decompression binaries (such as `xz` or `unpigz`) from the container's filesystem rather than the host's due to incorrect ordering of operations. A malicious container image containing a trojanized decompression binary can achieve arbitrary code execution with full daemon privileges, including host root UID and unrestricted capabilities, when a user uploads a compressed (xz or gzip) archive into that container. This issue is fixed in Docker Engine 29.5.1 and moby/moby v2.0.0-beta.14. Workarounds include only running containers from trusted images, using authorization plugins to restrict access to the `PUT /containers/{id}/archive` endpoint, and avoiding piping compressed archives into containers created from untrusted images

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.2 HIGH	LOCAL	HIGH	LOW	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 4%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
Red Hat	Red Hat multicluster global hub 1.4.3	1784060681 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782932114 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782931768 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782932104 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1783536000 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1783535989 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1783536515 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782932521 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1783018461 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1783018421 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782932812 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1783537001 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782932919 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1783537586 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782932969 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782933015 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782933042 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1783537392 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782933235 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782933251 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1783537955 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782933417 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1783537742 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782933602 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1783019377 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782934054 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782934036 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Openshift Data Foundation 4.22	1782934284 ≤ 𝑥 < *	ADP

openSUSE / SLES Releases

openSUSE Product

Release

docker-buildx

suse enterprise desktop 15 SP7	0.33.0-150000.253.1 fixed
suse enterprise sap 15 SP4	0.33.0-150000.253.1 fixed
suse enterprise sap 15 SP5	0.33.0-150000.253.1 fixed
suse enterprise sap 15 SP7	0.33.0-150000.253.1 fixed
suse enterprise server 15 SP4	0.33.0-150000.253.1 fixed
suse enterprise server 15 SP5	0.33.0-150000.253.1 fixed
suse enterprise server 15 SP6	0.33.0-150000.253.1 fixed
suse enterprise server 15 SP7	0.33.0-150000.253.1 fixed