CVE-2026-34040 - Vulnerability Analysis

Overview

Moby < 29.3.1 contains an authorization bypass caused by improper enforcement in authorization plugins, letting attackers bypass authorization, exploit requires no special conditions.

Severity & Score

Impact

Attackers can bypass authorization, potentially gaining unauthorized access to restricted resources.

Mitigation

Update to version 29.3.1 or later.

References

• https://github.com/moby/moby/releases/tag/docker-v29.3.1
• https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner