CVE-2026-41567

Stories

1. moby v25.0.17

   Moby 25.0.17 fixes CVE-2026-41568, a symlink escape in mount destination creation, and adds archive decompression before data enters a container. The release includes changes to the Engine API as well as other fixes and enhancements.

   Docker BlogAug 13

2. moby v29.5.1

   Moby 29.5.1 includes fixes for multiple security vulnerabilities affecting Docker Engine. One fix addresses CVE-2026-41567, a vulnerability in `docker cp` involving archive decompression.

   Docker BlogMay 18

Publishers

• Docker Blog

Often mentioned with

• CVE-2026-41568
• CVE-2026-42306
• CVE-2024-40635