{"id":"CVE-2026-41567","aliases":["GHSA-x86f-5xw2-fm2r","GO-2026-5746"],"url":"https://o3.security/vulnerability/CVE-2026-41567","summary":"Docker: `PUT /containers/{id}/archive` executes container binary on the host","details":"## Summary\n\nWhen a user uploads a compressed archive into a container, a malicious image can execute arbitrary code with daemon (host root) privileges.\n\n## Details\n\nWhen handling `PUT /containers/{id}/archive` requests with compressed archives, the daemon decompresses them using external system binaries. Due to incorrect ordering of operations, these binaries are resolved from the container's filesystem rather than the host's. A container image that includes a trojanized decompression binary can achieve code execution as the daemon process whenever a compressed archive is uploaded to that container.\n\nThe executed binary runs with the daemon's full privileges, including host root UID and unrestricted capabilities.\n\n## Impact\n\nArbitrary code execution as host root, crossing the container-to-host trust boundary.\n\n### Conditions for exploitation\n\n- A user must run a container from a malicious image that contains a trojanized decompression binary.\n- The user must then upload a compressed archive (xz or gzip) into that container, either by piping a compressed archive via `docker cp -` or by calling the `PUT /containers/{id}/archive` API directly with compressed content.\n\n### Not affected\n\nStandard `docker cp` usage is **not** affected, because the CLI sends uncompressed tar by default:\n\n```\ndocker cp ./file.txt mycontainer:/file.txt\n```\n\nThis can only be exploited when explicitly passing a xz or gzip-compressed archive to `docker cp` or the `PUT /containers/{id}/archive` API, for example:\n\n```\ncat archive.tar.xz | docker cp - mycontainer:/dir\n```\n\nDecompression formats using pure Go implementations (bzip2, zstd, and gzip when the container image does not contain an `unpigz` binary) are also not affected.\n\n## Workarounds\n\n- Only run containers from trusted images.\n- Use authorization plugins to limit access to the `PUT /containers/{id}/archive` endpoint.\n- Avoid piping compressed archives into containers created from untrusted images.","published":"2026-06-05T00:35:50.563Z","modified":"2026-09-11T03:30:28.393744516Z","cvss":{"score":7.2,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N"},"epss":{"score":0.00161,"percentile":0.05468,"asOf":"2026-08-24"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Go","name":"github.com/moby/moby/v2","fixedVersion":"2.0.0-beta.14"},{"ecosystem":"Go","name":"github.com/docker/docker","fixedVersion":null},{"ecosystem":"Go","name":"github.com/moby/moby","fixedVersion":null}],"fix":null,"references":[{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41567.json"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:37387"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:41030"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42852"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:44622"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:51057"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2026-41567"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41567.json"},{"type":"ADVISORY","url":"https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41567"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485356"},{"type":"PACKAGE","url":"https://github.com/moby/moby"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-09-11T03:30:28.393744516Z"}}