Moby vulnerabilities
59 CVEs and advisories name Moby as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-115538Docker Engine overlay-network encryption rules are not restored after a firewalld reload
- CVE-2026-115539Cluster-API proxy overwrites forwarded client identity with its own
- CVE-2026-121520Malicious client could set xattr value outside of BuildKit state directory
- CVE-2026-121522Possible panic from Git source resolver
- CVE-2026-61801github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files
- CVE-2026-92543Docker Engine insecure-registry fallback via malicious DNS responses
- CVE-2026-92542Blind VXLAN injection into encrypted overlay networks from cluster peer
- CVE-2026-93321Malformed LLB file operation can crash buildkitd
- CVE-2026-93315BuildKit proxy CA cleanup can be disrupted by build steps
- CVE-2026-93326Crafted Git build source can bypass certain policy validation
- CVE-2026-93323Oversized Dockerfile or .dockerignore can exhaust buildkitd memory
- CVE-2026-93322Malformed MergeOp can crash the BuildKit daemon
- CVE-2026-93320BuildKit improperly handles special files in build snapshots
- CVE-2026-93319A malicious frontend can cause a daemon panic
- CVE-2026-93318Cache poisoning via unvalidated image layer DiffIDs
- CVE-2026-93317Container blob cache can accept unverified content
- CVE-2026-93316Starting daemon with --cdi-disabled flag can lead to panic on specific builds
- CVE-2026-75593BuildKit: Malicious client can bypass destination directory validation on local sources upload
- CVE-2026-61711BuildKit: Custom frontend could bypass Seccomp/AppArmor
- CVE-2026-61712BuildKit: Possible runtime DoS via unbounded group parsing
- CVE-2026-17106Tar extraction in moby/go-archive can write outside the destination directory via link following
- CVE-2026-15793Git source checkout from a bundle file could lead to command injection
- CVE-2026-15792Possible panic when incorrect parameters sent from frontend
- CVE-2026-15791LLB file operation can be tricked to remove /tmp directory contents
- CVE-2026-15789Malicious client can bypass destination directory validation on local sources upload
- CVE-2026-15788WCOW cache mount source selector resolves NTFS junctions outside of cache root
- CVE-2026-42306Moby: Race condition in docker cp allows bind mount redirection to host path
- CVE-2026-41568Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
- CVE-2026-41567Docker: `PUT /containers/{id}/archive` executes container binary on the host
- CVE-2026-35469SpdyStream: DOS on CRI