UpHeron
All vulnerabilities

Servers and applications

CVE-2025-54410

Firewalld reload removes bridge network isolation

Severity
Medium 5.2
Published
29 Jul 2025
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
25.0.13, 28.0.0
Also known as
GHSA-4vq8-7jfc-9cvp
Sources
NVD, Project advisories (GitHub)

Description

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create iptables rules that isolate bridge networks, allowing any container to access all ports on any other…

Affected software

SoftwareAffected versions
Docker EngineServers and applications · cpe:a:mobyproject:moby
  • Every version before 25.0.13
Docker EngineServers and applications · github:moby/moby
  • Every version before 28.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-54410
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-54410
  • GitHub Advisory Database https://github.com/advisories/GHSA-4vq8-7jfc-9cvp
  • github.com https://github.com/moby/moby/security/advisories/GHSA-4vq8-7jfc-9cvp