POC-CopyEscape-CVE-2026-17106

CopyEscape — PoC for CVE-2026-17106 Educational Proof of Concept of CopyEscape CVE-2026-17106, a TOCTOU race condition vulnerability in docker cp that allows a malicious container to write arbitrary files on the Docker host. Inspired by the original work of masasron , who discovered and documente...

CopyEscape-CVE-2026-17106

CopyEscape: Taking Over Docker Hosts with docker cp CVE-2026-17106 This is the proof-of-concept repository for the blog post CopyEscape: Taking Over Docker Hosts withdocker cp — CVE-2026-17106. CopyEscape allows a malicious running container to race Docker's archive producer and create an...

CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5

CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5. A patched version of the package is available...

Astra Linux – Vulnerability in docker.io

Docker CLI is the command-line interface for the Docker container runtime. A bug was discovered in Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json, which lists a credsStore or credhelpers that cannot be...

AZL-97004 CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5

The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: zot, docker-cli-buildx, podman, kaniko, docker-compose, osv-scanner, conftest, kubescape, skaffold, trivy, trivy-operator, guac, scorecard, buildah...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: zot, docker-cli-buildx, podman, kaniko, docker-compose, osv-scanner, conftest, kubescape, skaffold, trivy, trivy-operator, guac, scorecard, buildah...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: temporal-server, nri-consul, chisel, pgpool2exporter, runc, terraform-provider-acme, conftest, temporal, emissary, omnibump, containerd, rancher-webhook, prometheus-adapter, crossplane-provider-aws-lambda, terraform-provider-grafana, azure-workload-identity-webhook,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: chisel, loki, nfpm, terraform-provider-acme, kine, containerd, crossplane-provider-aws-lambda, wal-g, caddy, crossplane-provider-family-azure, crossplane-provider-aws-ec2, kubescape, crossplane-provider-aws-memorydb, terraform-provider-tls, istio, kargo, zot, flux,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: goreleaser, teleport, policy-controller, vexctl, gh, kubescape, tkn, flux-source-controller, gitsign, ratify, witness, zot, docker-cli-buildx, kyverno-notation-aws, spire-server, ko, skaffold, zarf, neuvector-sigstore-interface, falcoctl, aactl, cosign, tekton-chains...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: slsa-verifier, docker, goreleaser, teleport, policy-controller, buildkitd, vexctl, gh, kubescape, tkn, flux-source-controller, crossplane, gitsign, ratify, witness, zot, docker-cli-buildx, kyverno-notation-aws, kyverno, spire-server, ko, skaffold, trivy-operator, zar...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nri-consul, conftest, emissary, nri-redis, helm-operator, containerd, helm-set-status, wait-for-port, wal-g, ini-file, caddy, controller-gen, nri-apache, kubernetes-dashboard-api, docker-machine-driver-harvester, harbor-cli, lazydocker, cloud-sql-proxy,...

Exploit for CVE-2026-17106

CopyEscape — PoC de CVE-2026-17106 Proof of Concept educati...

AZL-93168 CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: frankenphp-8.2, kubeflow-katib, mattermost-fips, kots, nemo, argo-cd-fips, kubernetes-csi-node-driver-registrar-fips, k3s, kubernetes-fips, tekton-pipelines-fips, loki, buildkitd-fips, gatekeeper, prometheus-elasticsearch-exporter, docker-cli-fips, grafana-fips,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: loki, telegraf, kots, kubernetes-dashboard, docker, k8s-device-plugin, timestamp-authority, kine, undock, fuse-overlayfs-snapshotter, containerd, glab, redka, buildah, pulumi-language-yaml, nerdctl, buildkitd, caddy, kubeflow-katib, prometheus-operator, istio, apko,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, frankenphp-8.2, mattermost-fips, kots, teleport-operator-fips, nemo, external-secrets-operator, argo-cd-fips, kubernetes-fips, k3s, rancher-agent, tekton-pipelines-fips, loki, gatekeeper, knative-kafka-broker, prometheus-elasticsearch-exporte...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: chisel, loki, nfpm, kine, containerd, wal-g, caddy, crossplane-provider-family-azure, kubescape, terraform-provider-tls, istio, docker-machine-driver-harvester, kargo, zot, flux, pulumi-language-dotnet, spire-server, argo-events, pulumi-language-java, hcloud, helm,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: loki, telegraf, kots, kubernetes-dashboard, kine, containerd, buildah, rancher, nerdctl, podman, fscrypt, prometheus-operator, gitlab-kas, istio, mattermost, snyk-cli, zot, external-secrets-operator, docker-cli-buildx, falco-no-driver, flux, kyverno, minio,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: manifest-tool, trivy-operator-fips, kots, newrelic-infrastructure-agent, neuvector-scanner, datadog-agent, rancher-agent, consul-k8s-fips, k3s, syft, google-osconfig-agent, tekton-pipelines-fips, buildkitd-fips, helm-set-status, gatekeeper, chainctl, chartmuseum,...