Docker vulnerabilities

Latest Docker CVEs

Newest publication first · page 18 of 40 · showing the latest 1,000

1. CVE-2026-44881 Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update

   Published 2026-05-28

   High·CVSS 8.5 EPSS 0.51%

   Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer supports deploying stacks from Git reposito...

2. CVE-2026-44848 Portainer: Missing authorization on Docker plugin endpoints allows host RCE

   Published 2026-05-28

   Critical·CVSS 9.4 EPSS 0.40%

   Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, The Docker plugin management endpoints (/plugins/*) w...

3. CVE-2026-44849 Portainer: Endpoint security bypass via Swarm service create/update

   Published 2026-05-28

   Critical·CVSS 9.4 EPSS 0.43%

   Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer enforces seven EndpointSecuritySettings res...

4. CVE-2026-44850 Portainer: Bind-mount restriction bypass via HostConfig.Mounts

   Published 2026-05-28

   High·CVSS 8.5 EPSS 0.23%

   Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer offers an environment-level Disable bind mo...

5. CVE-2026-44882 Portainer: Kubernetes middleware continues after token validation failure, bypassing endpoint authorization

   Published 2026-05-28

   High·CVSS 8.1 EPSS 0.34%

   Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33., Portainer proxies requests to Kubernetes clusters through a middleware lay...

6. CVE-2026-44883 Portainer: JWT accepted in URL query leaks tokens to logs and referers

   Published 2026-05-28

   High·CVSS 7.7 EPSS 0.29%

   Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer's authentication middleware accepts JWT bea...

7. CVE-2026-44884 Portainer: Missing authorization on custom template file endpoint exposes template content

   Published 2026-05-28

   Medium·CVSS 6.0 EPSS 0.26%

   Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8 and 2.39.1, a missing authorization vulnerability in the Custom Template f...

8. CVE-2026-44885 Portainer: Path traversal in backup archive extraction allows arbitrary file write

   Published 2026-05-28

   Medium·CVSS 5.5 EPSS 0.61%

   Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, Portainer's backup restore feature accepts a .tar.gz archive and extracts...

9. CVE-2026-44345 BentoML: Dockerfile command injection via docker.base_image

   Published 2026-05-27

   High·CVSS 8.8 EPSS 0.32%

   BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, src/bentoml/_internal/container/frontend/dockerfile/templates/base_v2.j2 interpolates docker.base_image raw with no escaping, newline filtering, or validati...

10. CVE-2026-44346 BentoML: Dockerfile command injection via envs[*].name in bentofile.yaml

    Published 2026-05-27

    High·CVSS 8.8 EPSS 0.32%

    BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, a malicious bentofile.yaml containing a newline-injected value in envs[*].name produces unquoted RUN directives in the BentoML-generated Dockerfile. When th...

11. CVE-2026-44321 free5GC: SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf)

    Published 2026-05-27

    High·CVSS 7.5 EPSS 0.36%

    free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound OAuth2 middleware. The POST /upi/v1/upNodesLinks create-or-update handler accepts attacker-controlled JSON and passes it directly i...

12. CVE-2026-44329 free5GC: SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers

    Published 2026-05-27

    Critical·CVSS 10.0 EPSS 0.33%

    free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without OAuth2/bearer-token authorization middleware. A network attacker who can reach SMF on the SBI can hit UPI endpoints with no Authorization h...

13. CVE-2026-44830 Empty API_TOKEN disables authentication on network-reachable HTTP/SSE transport

    Published 2026-05-27

    High·CVSS 8.7 EPSS 0.22%

    Nocturne Memory is a lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents. Prior to 2.4.1, when API_TOKEN is unset or empty, the BearerTokenAuthMiddleware bypasses authentication for all HTTP requests. Combined with the default 0.0.0.0 host binding and COR...

14. CVE-2026-45298 Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)

    Published 2026-05-26

    High·CVSS 8.6 EPSS 1.5%

    Dozzle is a realtime log viewer for docker containers. Prior to 10.5.2, in a default dozzle deploy (the documented quickstart, no DOZZLE_AUTH_PROVIDER set), POST /api/notifications/test-webhook is reachable without authentication and forwards an attacker-controlled URL into a Web...

15. CVE-2026-44985 Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authentication

    Published 2026-05-26

    High·CVSS 8.7 EPSS 0.21%

    Dozzle is a realtime log viewer for docker containers. Prior to 10.5.2, he WebSocket upgrader for the /exec and /attach endpoints uses CheckOrigin: func(r *http.Request) bool { return true }, accepting upgrade requests from any origin. Combined with the JWT cookie using SameSite:...

16. CVE-2026-47672 epa4all-client: Unauthenticated REST API for Patient Record Writes

    Published 2026-05-26

    Medium·CVSS 6.5 EPSS 0.16%

    epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. In 1.2.4 and earlier, any network-reachable caller can write arbitrary documents to any patient's electronic health record accessible by the institution's SMC-B card. In a misconfigured deploy...

17. CVE-2026-45082 Karakeep has a SSRF Protection Bypass via Redirect Handling

    Published 2026-05-26

    High·CVSS 7.6 EPSS 0.30%

    Karakeep is a elf-hostable bookmark-everything app. A Server-Side Request Forgery (SSRF) protection bypass vulnerability was identified in versions prior to 0.32.0 affecting redirect-following processing components. Although the application implements protections intended to prev...

18. MAL-2026-4272 Malicious code in env-loader-cli (PyPI)

    Published 2026-05-24

    Unknown

    -= Per source details. Do not edit below this line.=- Source: amazon-inspector (1749501a0825ad4a98638bbab4bd2bd9550436adcb9bb7781b6552735f7f3eb0) The package advertises itself as a benign.env/JSON/YAML loader but its top-level init.py imports a hidden _core module that, on every...

19. MAL-2026-4271 Malicious code in data-pipeline-check (PyPI)

    Published 2026-05-24

    Unknown

    -= Per source details. Do not edit below this line.=- Source: amazon-inspector (37ca0e77c4eda50057aa04c615897f067ee866d02fc1e2fe65cdbb263d3081e8) On import pipeline_check, the package spawns a daemon thread that, after a random 3-15 second delay, walks ~/.ssh, ~/.aws, ~/.ethereum...

20. MAL-2026-4273 Malicious code in git-config-sync (PyPI)

    Published 2026-05-24

    Unknown

    -= Per source details. Do not edit below this line.=- Source: amazon-inspector (8e49db03099f1d6053a9ebada346c3816399bc47918c92d765162128a095c401) On import gitconfig_sync, the package's _core.py spawns a daemon thread (after a 3-15 second random delay) that walks ~/.ssh, ~/.aws,...

21. CVE-2026-5843 Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading

    Published 2026-05-22

    High·CVSS 8.8 EPSS 0.22%

    The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the model_file configuration field in config.json. When a model's config.json specifies a model_file poi...

22. CVE-2026-5817 Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends

    Published 2026-05-22

    High·CVSS 8.8 EPSS 0.22%

    The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing. This causes transformers.AutoTokenizer.from_pretrained() to import and execute arbitrary Python files included...

23. CVE-2026-6406 Docker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag

    Published 2026-05-22

    High·CVSS 8.8 EPSS 0.21%

    The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag...

24. GHSA-mw8f-w6p8-xrf4 wger: cross-tenant account deletion / deactivation / activation by gym.manage_gym + gym=None

    Published 2026-05-20

    High·CVSS 8.5

    Summary GHSA-mhc8-p3jx-84mm (CVE-2026-43948) reported that wger's reset_user_password and gym_permissions_user_edit views in wger/gym/views/user.py performed a gym-scope authorization check using Django ORM object comparison (if request.user.userprofile.gym != user.userprofile.gy...

25. GHSA-7hgr-7h44-33w2 CamoFox MCP: Unauthenticated HTTP MCP browser-control surface

    Published 2026-05-19

    High·CVSS 7.0

    Unauthenticated HTTP MCP browser-control surface in camofox-mcp Summary camofox-mcp exposed a Streamable HTTP MCP endpoint at /mcp with rate limiting but no inbound MCP-layer authentication. When HTTP mode was enabled, any client that could reach /mcp could list and invoke browse...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.