Tecnativa vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Tecnativa products: 1 record(s), with severity, exploitation and fixes.

Docker-socket-proxy 1

Exploited only (KEV) →

CVE-2026-78122 High · 7.4 CWE-1220 Aug 22, 2026

docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and /containers/{id}/top to read arbitrary files and download entire container filesystems as tar archives.