IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.1Yüksek

CVE-2026-17106Tar extraction in moby/go-archive can write outside the destination directory via link following

moby go-archive; Docker Docker Sandboxes; Docker Docker Desktop; Docker Docker Engine Yayım: (2 ay önce)

Açıklama

The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the filesystem operation on a path that is resolved by the OS, so links introduced by the archive can be followed out of the destination directory. An attacker who controls the contents of an archive can create or overwrite files at arbitrary paths writable by the extracting process.

Zayıflık türü (CWE): CWE-59

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
docker desktop —
Docker Docker CLI < 29.7.0
Docker Docker Compose < 5.4.0
Docker Docker Desktop < 4.86.0
Docker Docker Engine < 29.7.0
Docker Docker Sandboxes < 0.38.0
moby go-archive < 0.3.0

Kaynaklar ve yamalar

Aynı üründe son açıklar — Docker / Moby

5.7Orta
CVE-2026-123082

Docker Desktop logs can expose the Docker Hub access token

Docker Docker Desktop

Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to application logs and diagnostics bundles. IPC payloads that were bare JSON strings or arrays were not redacted before logging, and a Docker D…

6.7Orta
CVE-2026-121522

Possible panic from Git source resolver

moby BuildKit

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.