CVE-2026-34040

Summary

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.

Affected Software

Weaknesses

• CWE-288: CWE-288: Authentication Bypass Using an Alternate Path or Channel

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2
• https://github.com/moby/moby/releases/tag/docker-v29.3.1

• ←Previous
• Next→