CVE Intelligence

Tecnativa Docker-socket-proxy vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Tecnativa Docker-socket-proxy: 1 record(s), with affected versions and fixes.

CVE-2026-78122 High · 7.4 CWE-1220 Aug 22, 2026
docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems
docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and /containers/{id}/top to read arbitrary files and download entire container filesystems as tar archives.