6.8
Medium
CVE-2026-33997 Moby is an open source container framework
Description
Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, the daemon may incorrectly accept a privilege set that differs from the one approved by the user. Plugins that request exactly one privilege are also affected, because no comparison is performed at all. This issue has been patched in version 29.3.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| moby 29.3 | earliest → < 29.3.1 | 29.3.1 |
| Multicluster Global Hub 1.4.5 1779579439 | earliest → < 1779579439 | 1779579439 |
| Multicluster Global Hub 1.5.4 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.6.2 1780167118 | earliest → < 1780167118 | 1780167118 |
| Multicluster Engine for Kubernetes | Versions not published | |
| OpenShift Service Mesh 2 | Versions not published | |
| Red Hat Advanced Cluster Management for Kubernetes 2 | Versions not published | |
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat OpenShift Virtualization 4 | Versions not published |
Show the 11 other branches Hide the 11 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat multicluster global hub 1.4.3 1779579439 | earliest → < 1779579439 | 1779579439 |
| Multicluster Global Hub 1.5.6 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.6.4 1780167118 | earliest → < 1780167118 | 1780167118 |
| Red Hat multicluster global hub 1.4.4 1779579439 | earliest → < 1779579439 | 1779579439 |
| Red Hat multicluster global hub 1.6.0 1780167118 | earliest → < 1780167118 | 1780167118 |
| Red Hat multicluster global hub 1.5.0 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.5.7 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.6.5 1780167118 | earliest → < 1780167118 | 1780167118 |
| Red Hat multicluster global hub 1.4.2 1779579439 | earliest → < 1779579439 | 1779579439 |
| Red Hat multicluster global hub 1.5.1 1778867753 | earliest → < 1778867753 | 1778867753 |
| Red Hat multicluster global hub 1.5.3 1778867753 | earliest → < 1778867753 | 1778867753 |
References
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of moby
The 20 CVEs of moby →
CVE-2026-92543
Docker Engine classifies a registry hostname as insecure using an any-match DNS check
7.6
High
CVE-2026-42306
Moby is an open source container framework
7.2
High
CVE-2026-41568
Moby is an open source container framework
6.1
Medium
CVE-2026-34040
Moby is an open source container framework
8.8
High