CVE-2025-9074

CVE-2025-9074 - Docker Remote API（ラボ PoC） ⚠️ 免責事項: このリポジトリは教育および研究目的のみ で使用されます。 所有する管理された環境以外でこのコードを使用しない でください。 作者は誤用に対して一切の責任を負いません。 概要 このリポジトリは、Docker Remote API に関連する設定ミスの脆弱性 CVE-2025-9074 の概念実証（PoC）です。 Docker デーモンが認証なしで公開されていた場合、攻撃者は API リクエストを送信してコンテナを作成・起動することができました。 この PoC...

CVE-2024-21626-POC

CVE-2024-21626-POC 使用說明 教育・研究目的のみに使用してください。教育・研究に関係のない行為によって生じたリスクは自己責任となります 使用 docker build . -t cve-2024-21626 docker run -it --rm cve-2024-21626 bash /poc.sh 另起一个terminal /bin/bash.copy 注意 docker/runcのバージョンによって使用される具体的なファイルディスクリプタは異なります。例えば、docker server:20.10.17 && runc version 1.1.2 の場合は...

poc-2025-9074

CVE-2025-9074 | Docker API CVE-2025-9074 PoC Proof-Of-Concept 인증되지 않은 Docker API 엔드포인트를 대상으로 하는 정교한 익스플로잇 프레임워크로, 통합된 대화형 명령 셸이 포함되어 있습니다. 개요 이 도구는 인증 없이 노출된 Docker API 인스턴스를 자동으로 익스플로잇하여 대상 호스트에서 전체 컨테이너 생성 및 명령 실행을 가능하게 합니다. 사용자 정의 대화형 셸을 제공하여 사후 익스플로잇 작업을 원활하게 수행할 수 있습니다. 참고: 이는 사용자 정의 PoC...

SUSE CVE-2026-17113

A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...

AZL-97649 CVE-2026-17113 affecting package cri-o 1.30.1-1

A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...

PT-2026-81044

Name of the Vulnerable Software and Affected Versions CRI-O affected versions not specified Description A flaw exists in the container-creation environment-variable handling within the mergeEnvs function located in server/utils.go and used by setupContainerEnvironmentAndWorkdir in server/containe...

[SECURITY] Fedora 43 Update: buildah-1.43.2-1.fc43

The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...

CVE-2026-47262

CVE-2026-47262 affects containerd where a maliciously crafted image can trigger a Denial of Service by exhausting memory during container creation, causing an Out-Of-Memory (OOM) kill of the containerd process and making the runtime API unavailable (impacting clients like Docker Engine and Kubern...

[SECURITY] Fedora 44 Update: buildah-1.43.2-1.fc44

The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...

CVE-2026-44850 Portainer: Bind-mount restriction bypass via HostConfig.Mounts

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer offers an environment-level Disable bind mounts for...

CVE-2026-44850 Portainer: Bind-mount restriction bypass via HostConfig.Mounts

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer offers an environment-level Disable bind mounts for...

OESA-2026-2434 buildah security update

The package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a new image...

Portainer has a bind-mount restriction bypass via HostConfig.Mounts

Summary Portainer offers an environment-level Disable bind mounts for non-administrators security setting that blocks regular users from binding host paths into containers they create through the Portainer-mediated Docker API. The check that enforces this setting only inspected the legacy...

Incorrect Authorization

Overview github.com/portainer/portainer/api/http/proxy/factory/docker is a management UI which allows to manage different Docker environments. Affected versions of this package are vulnerable to Incorrect Authorization in the HostConfig.Mounts process. An attacker can gain unauthorized access to...

GHSA-7FW3-X4R2-G7WC Portainer has a bind-mount restriction bypass via HostConfig.Mounts

Summary Portainer offers an environment-level Disable bind mounts for non-administrators security setting that blocks regular users from binding host paths into containers they create through the Portainer-mediated Docker API. The check that enforces this setting only inspected the legacy...

[SECURITY] Fedora 44 Update: buildah-1.43.1-1.fc44

The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...

Cross-Site Request Forgery (CSRF)

github.com/canonical/lxd is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to improper validation of client-side authentication tokens, which allows an attacker to trigger container creation and startup through crafted HTML form submissions without user consent...

[SECURITY] Fedora 43 Update: buildah-1.42.0-4.fc43

The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...

Cross-site Request Forgery (CSRF)

Overview org.jenkins-ci.plugins:windocks-start-container is an Allows users to create running containers based on Images available on the WinDocks host. WinDocks is a port of Docker’s open source to Windows, and supports all editions of Windows 8, Windows 10, Windows Server 2012, and Windows Serv...

Linux Distros Unpatched Vulnerability : CVE-2025-54286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-Site Request Forgery CSRF in LXD-UI in Canonical LXD versions = 5.0 on Linux allows an attacker to create and start container instances without user conse...