Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and /containers/{id}/top to read arbitrary files and download entire container filesystems as tar archives.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-22 | 2 | Disclosure2 |
| 2026-08-23 | 1 | General1 |
| 2026-08-24 | 1 | Disclosure1 |
| 2026-08-31 | 1 | Patch1 |
🚨 HIGH SEVERITY: CVE-2026-78122 (CVSS 7.4) docker-socket-proxy fails to gate read endpoints. Attackers can extract container filesystems via GET requests when CONTAINERS env var is set. Patch immediately. #CVE #Vulnerability #PatchNow #Docker https://t.co/AGjvquplHc
Post summary
The tweet highlights CVE-2026-78122 in docker-socket-proxy, a high‑severity flaw that lets attackers read container filesystems, and urges an immediate patch.
CVE-2026-78122 - Arbitrary file read in docker-socket-proxy allows leaks of container filesystems and logs. CVSS 7.4. Review and restrict proxy access now. #CVE #Docker #infosec https://www.valtersit.com/cve/CVE-2026-78122 #CVE #CVEAlert #infosec #SysAdmin #cybersecurity #Linux #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #ukraine #spain #ireland #unitedkingdom #canada #finland #estonia #lithuania #ireland #hungary #denmark #norway #malta #mexico #switczerland #china #france #germany
Post summary
The post announces CVE-2026-78122, an arbitrary file‑read vulnerability in docker‑socket‑proxy (CVSS 7.4), and recommends restricting proxy access as a mitigation step.
CVE-2026-78122 (CVSS 8.3) affects docker-socket-proxy, exposing Docker container read endpoints when CONTAINERS env var is set. Assess exposure if using this tool. via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/jo7cGvEONO
Post summary
The tweet highlights CVE-2026-78122 with its CVSS score and technical detail that docker‑socket‑proxy exposes read endpoints when the CONTAINERS environment variable is set, but it does not mention PoC, exploit code, or a patch.
🚨*CVE* CVE-2026-78122 docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use G… https://www.cve.org/CVERecord?id=CVE-2026-78122 ----- Traducción: CVE-2026-78122 doc… http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-78122, describing a misuse of the docker-socket-proxy’s gating of Docker API read endpoints when the CONTAINERS variable is set; no PoC, exploit code, or patch is mentioned.
CVE-2026-78122 docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use G… https://www.cve.org/CVERecord?id=CVE-2026-78122
Post summary
CVE‑2026‑78122 exposes a misconfiguration in docker‑socket‑proxy that allows attackers to read endpoints in the /containers API namespace when the CONTAINERS environment variable is set.