Engine vulnerabilities

3 known vulnerabilities in Engine from Docker. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  moby: UNIX Symbolic Link (Symlink) Following

  CVE-2026-42306Jun 12, 2026Moby

  Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to redirec

• 7.8 High severity

  moby: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-34040Mar 31, 2026MobyEPSS 9.27%

  Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.

• 8.1 High severity

  moby: Off-by-one Error

  CVE-2026-33997Mar 31, 2026Moby

  Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, th