Skip to content
OpenAdvisories

Product · Docker

Docker CLI

2 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Feed

  • High 7.1
    CVE-2026-17106

    Tar extraction in moby/go-archive can write outside the destination directory via link following

    The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical str…

    Docker moby Docker Desktop Docker Sandboxes Debian Ubuntu Go
  • High 7.0
    CVE-2025-15558

    Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

    Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, docker-build…

    Docker Docker CLI Compose github.com/docker/compose/v2 Go