Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archive is uploaded to a container via `PUT /containers/{id}/archive` or piped through `docker cp -`, the daemon resolves decompression binaries (such as `xz` or `unpigz`) from the container's filesystem rather than the host's due to incorrect ordering of operations. A malicious container image containing a trojanized decompression binary can achieve arbitrary code execution with full daemon privileges, including host root UID and unrestricted capabilities, when a user uploads a compressed (xz or gzip) archive into that container. This issue is fixed in Docker Engine 29.5.1 and moby/moby v2.0.0-beta.14. Workarounds include only running containers from trusted images, using authorization plugins to restrict access to the `PUT /containers/{id}/archive` endpoint, and avoiding piping compressed archives into containers created from untrusted images
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-05 | 1 | Disclosure1 |
| 2026-06-26 | 1 | General1 |
CVE-2026-41567: Docker Archive Upload Vulnerability - What It Means for Your Business and How to Respond https://hubs.li/Q04mNbkb0
Post summary
The provided text references a blog title about CVE‑2026‑41567 but includes no substantive details, PoC, exploit code, or patch information, rendering it a generic informational entry.
CVE-2026-41567 Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archive is uploaded to a contai… https://www.cve.org/CVERecord?id=CVE-2026-41567
Post summary
The entry announces CVE‑2026‑41567 in Moby, noting vulnerable versions and the condition under which the issue can be triggered, but it does not provide any PoC, exploit, or active exploitation details.