CVE-2026-41568

EUVD-2026-36527
Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitrary absolute paths on the host filesystem. This issue has been patched in Docker Engine version 29.5.1 and Moby Daemon version 2.0.0-beta.14.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.1 MEDIUM
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 1%
Affected Products (NVD)
VendorProductVersion
dockerengine
𝑥
< 29.5.1
mobyprojectmoby
𝑥
≤ 28.5.2
mobyprojectmoby/v2
2.0.0:beta0
mobyprojectmoby/v2
2.0.0:beta1
mobyprojectmoby/v2
2.0.0:beta10
mobyprojectmoby/v2
2.0.0:beta11
mobyprojectmoby/v2
2.0.0:beta12
mobyprojectmoby/v2
2.0.0:beta13
mobyprojectmoby/v2
2.0.0:beta2
mobyprojectmoby/v2
2.0.0:beta3
mobyprojectmoby/v2
2.0.0:beta4
mobyprojectmoby/v2
2.0.0:beta5
mobyprojectmoby/v2
2.0.0:beta6
mobyprojectmoby/v2
2.0.0:beta7
mobyprojectmoby/v2
2.0.0:beta8
mobyprojectmoby/v2
2.0.0:beta9
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
docker.io
bookworm
vulnerable
bullseye
vulnerable
bullseye (security)
vulnerable
forky
28.5.2+dfsg4-3
fixed
sid
28.5.2+dfsg4-3
fixed
trixie
vulnerable
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
docker.io
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
questing
ignored
resolute
needs-triage
xenial
needs-triage
docker.io-app
focal
needs-triage
jammy
needs-triage
noble
needs-triage
questing
ignored
resolute
needs-triage
Common Weakness Enumeration
References
https://github.com/moby/moby/security/advisories/GHSA-vp62-88p7-qqf5