ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-78122

docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems

CVSS 4.0 8.3 HIGHCVSS 3.1 7.4 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2026-78122

Published

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and /containers/{id}/top to read arbitrary files and download entire container filesystems as tar archives.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-78122

Published

docker-socket-proxy

https://hub.docker.com/r/tecnativa/docker-socket-proxy

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Tecnativa",
                    "product": "docker-socket-proxy",
                    "defaultStatus": "unaffected",
                    "packageURL": "pkg:docker/tecnativa/docker-socket-proxy",
                    "collectionURL": "https://hub.docker.com/r/tecnativa/docker-socket-proxy",
                    "versions": [
                        {
                            "version": "0",
                            "lessThanOrEqual": "0.5.0",
                            "status": "affected",
                            "versionType": "semver"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON