moby Docker Engine vulnerabilities

Latest moby Docker Engine CVEs

Newest publication first

1. CVE-2026-41567 Docker: `PUT /containers/{id}/archive` executes container binary on the host

   Published 2026-06-05

   High·CVSS 7.2 EPSS 0.32%

   Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archive is uploaded to a container via PUT /containers/{id}/archive or piped through docker cp -, the daemon resolves decompression binaries (suc...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.