Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2026-34040

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.

VectorLOCAL

PublishedMar 31, 2026, 03:15

Published Bysecurity-advisories@github.com

Base Score

Score7.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

github.com/moby/moby(Go)029.3.1N/A

github.com/docker/docker(Go)029.3.1N/A

github.com/moby/moby/v2(Go)02.0.0-beta.8N/A

References

https://github.com/moby/moby/releases/tag/docker-v29.3.1
https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2

Weakness Type

CWE-288

CVSS Metrics

Base Score

7.8

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

LOCAL