VDB
KO

GO-2026-5617

Docker: Race condition in docker cp allows bind mount redirection to host path in github.com/docker/docker

Details

Docker: Race condition in docker cp allows bind mount redirection to host path in github.com/docker/docker

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/docker/docker
Introduced in: 0

No fixed version published yet for github.com/docker/docker (go modules). Pin to a known-safe version or switch to an alternative.

Go / github.com/moby/moby
Introduced in: 0

No fixed version published yet for github.com/moby/moby (go modules). Pin to a known-safe version or switch to an alternative.

Go / github.com/moby/moby/v2
Introduced in: 0 Fixed in: 2.0.0-beta.14
Fix go get github.com/moby/moby/v2@v2.0.0-beta.14

References