一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-78122 [HIGH] – docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API na

未分类
📑 文章目录

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and /containers/{id}/top to read arbitrary files and download entire container filesystems as tar archives.