{"apiVersion":"1.0","identifier":"CVE-2026-78122","description":"docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and /containers/{id}/top to read arbitrary files and download entire container filesystems as tar archives.","publishedAt":"2026-08-22T23:16:22","lastModifiedAt":"2026-08-26T18:17:04","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-78122","cvssScore":7.4,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","epssProbability":0.00322,"riskScore":0.76,"affectedProduct":"docker-socket-proxy","affectedVersions":"unknown","vulnerabilityType":"Docker image","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-78122","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-78122","en":"https://www.redsauce.net/en/cves/CVE-2026-78122","fr":"https://www.redsauce.net/fr/cves/CVE-2026-78122","pt":"https://www.redsauce.net/pt/cves/CVE-2026-78122","de":"https://www.redsauce.net/de/cves/CVE-2026-78122","sk":"https://www.redsauce.net/sk/cves/CVE-2026-78122","el":"https://www.redsauce.net/el/cves/CVE-2026-78122"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-78122"}}