Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-70819 EUVD-2025-210895GHSA-vmr6-g39x-qp82

Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../..…

Published Sep 13, 2026 · Updated Sep 14, 2026 · Assigned by mitre

Description

Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw in a compose file.

Affected products

VendorProductAffectedFixed
Zettlab D6 Ultra < 1.7.0 1.7.0

References