CVE-2025-54388 Moby's Firewalld reload makes published container ports accessible from remote hosts

🗓️ 30 Jul 2025 13:24:06Reported by GitHub_MType

Moby's Firewalld reload exposes published container ports to remote hosts in versions 28.2.0 to 28.3.2.

Reporter	Title	Published	Views	Family All 109
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager	17 Mar 202603:46	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	19 Dec 202520:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Go affects IBM Robotic Process Automation for Cloud Pak	16 Jan 202619:41	–	ibm
IBM Security Bulletins	Security Bulletin: Firewalld Reload Bypasses Localhost Port Restrictions in Moby (Docker Engine) Prior to 28.3.3, affects watsonx.data	6 Jan 202606:00	–	ibm
AlpineLinux	CVE-2025-54388	30 Jul 202513:24	–	alpinelinux
BDU FSTEC	The vulnerability of the Firewall software for creating containerized systems like Moby allows a intruder to gain unauthorized access to protected information.	5 Aug 202500:00	–	bdu_fstec
Chainguard	CVE-2025-54388 vulnerabilities	30 Jul 202513:17	–	cgr
Circl	CVE-2025-54388	21 Aug 202513:58	–	circl
CNNVD	Moby 安全漏洞	30 Jul 202500:00	–	cnnvd
CVE	CVE-2025-54388	30 Jul 202513:24	–	cve

[
  {
    "vendor": "moby",
    "product": "moby",
    "versions": [
      {
        "version": ">= 28.2.0, < 28.3.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/moby/moby/commit/bea959c7b793b32a893820b97c4eadc7c87fabb0
github	www.github.com/moby/moby/security/advisories/GHSA-x4rx-4gw3-53p4
github	www.github.com/moby/moby/pull/50506

30 Jul 2025 13:24Current

CVSS 45.1

EPSS0.00201

CWE-909