CVE-2026-78122
HIGH
8,3
Source: [email protected]
Attack Vector: adjacent
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
HIGH
7,4
Source: [email protected]
Attack Vector: adjacent_network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: changed
Confidentiality: high
Integrity: none
Availability: none
Description
AI Translation Available
docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and /containers/{id}/top to read arbitrary files and download entire container filesystems as tar archives.
1220
Insufficient Granularity of Access Control
IncompleteCommon Consequences
Security Scopes Affected:
Confidentiality
Integrity
Availability
Access Control
Potential Impacts:
Modify Memory
Read Memory
Execute Unauthorized Code Or Commands
Gain Privileges Or Assume Identity
Bypass Protection Mechanism
Other
Applicable Platforms
All platforms may be affected
https://gist.github.com/nedlir/e4f52f88a757f02c67db1fd5dd70d732
https://github.com/Tecnativa/docker-socket-proxy
https://github.com/Tecnativa/docker-socket-proxy/blob/v0.5.0/haproxy.cfg#L49-L61
https://github.com/Tecnativa/docker-socket-proxy/issues/182
https://github.com/Tecnativa/docker-socket-proxy/pull/183
https://www.vulncheck.com/advisories/docker-socket-proxy-through-insufficient-a…