UpHeron
All vulnerabilities

Servers and applications

CVE-2026-41568

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitrary absolute paths on the host filesystem. This issue has been patched in Docker Engine version 29.5.1…

Severity
Medium 6.1
Published
12 Jun 2026
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Docker EngineServers and applications · cpe:a:mobyproject:moby
  • Every version up to 28.5.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-41568
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-41568