Skip to content
OpenAdvisories
High · 7.1 Public exploit CVE-2026-17106 BIT-docker-cli-2026-17106EUVD-2026-61112GHSA-hfg8-hc9c-6c3hGO-2026-6253

Tar extraction in moby/go-archive can write outside the destination directory via link following

Published Aug 18, 2026 · Updated Aug 19, 2026 · Assigned by Docker

Vendor: Docker Vendor: moby Product: Docker CLI Product: Docker Compose Product: Docker Desktop Product: Docker Engine Product: Docker Sandboxes Product: go-archive Package: act Package: buildah Package: buildkitd Package: docker-28 Package: docker-cli Package: docker-cli-buildx Package: docker.io Package: docker.io-app Package: dockerd-28 Package: falcoctl Package: github.com/moby/go-archive Package: golang-github-moby-go-archive Package: k3d Package: kaniko Package: kaniko-warmer Package: kubescape Package: moby-engine Package: openbao Package: podman-6.0 Package: skaffold Package: telegraf-1.38 Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the filesystem operation on a path that is resolved by the OS, so links introduced by the archive can be followed out of the destination directory. An attacker who controls the contents of an archive can create or overwrite files at arbitrary paths writable by the extracting process.

Affected products

VendorProductAffectedFixed
moby go-archive < 0.3.0 0.3.0
Docker Docker Sandboxes < 0.38.0 0.38.0
Docker Docker Desktop < 4.86.0 4.86.0
Docker Docker Engine < 29.7.0 29.7.0
Docker Docker CLI < 29.7.0 29.7.0
Docker Docker Compose < 5.4.0 5.4.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-github-moby-go-archive 0.3.3-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 docker.io +1 No fix yet —
Ubuntu 26.04 LTS docker.io +1 No fix yet —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS docker.io +1 No fix yet —
Ubuntu Pro 22.04 LTS docker.io +1 No fix yet —
Ubuntu Pro 20.04 LTS docker.io +1 No fix yet —
Ubuntu Pro 18.04 LTS docker.io No fix yet —
Ubuntu Pro 16.04 LTS docker.io No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 podman +3 7:5.8.2-9.el10_2 RHSA-2026:98554, RHSA-2026:70201
RHEL 9 podman +4 6:5.8.2-7.el9_8 RHSA-2026:69961
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Hardened Images 1 podman +4 5:6.0.2-2.2.hum1 RHSA-2026:52807

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 podman +3 7:5.8.2-9.el10_2.alma.1 ALSA-2026:70201
AlmaLinux 9 podman +4 6:5.8.2-7.el9_8 ALSA-2026:69961

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 podman 7:5.8.2-9.el10_2 RLSA-2026:70201
Rocky Linux 9 podman 6:5.8.2-7.el9_8 RLSA-2026:69961

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 apptainer 1.5.3-150600.4.37.1 SUSE-SU-2026:3863-1
SLES 15 SP6 apptainer 1.5.3-150600.4.37.1 SUSE-SU-2026:3863-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 govulncheck-vulndb 0.0.20260827T195228-160000.1.1 SUSE-SU-2026:23625-1
SLES 16.0 govulncheck-vulndb 0.0.20260827T195228-160000.1.1 SUSE-SU-2026:23625-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed apptainer 1.5.3-2.1 openSUSE-SU-2026:11544-1
openSUSE Tumbleweed buildah 1.46.0-1.1 openSUSE-SU-2026:12341-1
openSUSE Tumbleweed buildpacks-cli 0.40.10-1.1 openSUSE-SU-2026:12260-1
openSUSE Tumbleweed podman 6.1.2-1.1 openSUSE-SU-2026:12068-1
openSUSE Leap 16.0 apptainer 1.5.3-bp160.2.1 openSUSE-SU-2026:21611-1
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260827T195228-160000.1.1 openSUSE-SU-2026:21761-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 docker 25.0.18-1.amzn2023.0.1 ALAS2023-2026-3266
Amazon Linux 2023 runfinch-finch 1.19.0-1.amzn2023.0.1 ALAS2023-2026-3140

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 docker-cli 25.0.7-5 —
Azure Linux 3 moby-engine 25.0.3-20 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 podman +3 7:5.8.2-9.0.1.el10_2 ELSA-2026-70201
Oracle Linux 9 podman +4 6:5.8.2-7.0.1.el9_8 ELSA-2026-69961

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling act 0.2.90-r0 —
Wolfi rolling buildah 1.45.0-r2 —
Wolfi rolling buildkitd 0.32.2-r2 —
Wolfi rolling docker-cli-buildx 0.36.1-r2 —
Wolfi rolling falcoctl 0.13.0-r24 —
Wolfi rolling k3d +2 No fix yet —
Wolfi rolling kaniko +1 1.25.18-r5 —
Wolfi rolling kubescape 4.0.12-r7 —
Wolfi rolling openbao 2.6.2-r1 —
Wolfi rolling podman-6.0 6.0.2-r4 —
Wolfi rolling skaffold 2.24.0-r4 —
Wolfi rolling telegraf-1.38 1.38.4-r20 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 4 repositories

  • masasron/CopyEscape-CVE-2026-17106 ★ 23 · Aug 9, 2026

    PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp

  • 686f6c61/POC-CopyEscape-CVE-2026-17106 ★ 1 · Aug 12, 2026

    PoC funcional de CVE-2026-17106 (CopyEscape): carrera TOCTOU en docker cp que permite escritura arbitraria en el host Docker. Laboratorio Docker + monitor inotify + LD_PRELOAD. Variante macOS inocua …

  • HackSpeak/CVE-2026-17106 ★ 1 · Aug 11, 2026

    CopyEscape (CVE-2026-17106) docker cp container-to-host arbitrary file write PoC mirror — Imperva Ron Masas, MIT; for authorized security testing

  • CompleteTech-Security/copyescape-check ★ 0 · Oct 23, 2026

    Offline Docker CopyEscape evidence checker for CVE-2026-17106. Docker version and build-configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/moby/go-archive < 0.3.0 0.3.0 GHSA-hfg8-hc9c-6c3h

Advisories 21

References