CVE-2026-17106highCWE-59

Tar extraction in moby/go-archive can write outside the destination directory via link following

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 7.1epss 0.2%

from disclosure to weapon0 days

Published on NVDAug 18

1st PoCAug 11

exploitation probability

0.2%top 91% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the filesystem operation on a path that is resolved by the OS, so links introduced by the archive can be followed out of the destination directory. An attacker who controls the contents of an archive can create or overwrite files at arbitrary paths writable by the extracting process.

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

Docker · Docker CLI Docker · Docker Compose Docker · Docker Desktop Docker · Docker Engine Docker · Docker Sandboxes moby · go-archive

public PoCs found — 3

cve_referencegithub.com/masasron/CopyEscape-CVE-2026-17106★ 17 githubgithub.com/HackSpeak/CVE-2026-17106★ 1 githubgithub.com/686f6c61/POC-CopyEscape-CVE-2026-17106★ 1

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://docs.docker.com/desktop/release-notes/#4860 https://docs.docker.com/engine/release-notes/29/#2970 https://github.com/docker/cli/releases/tag/v29.7.0 https://github.com/docker/compose/releases/tag/v5.4.0 https://github.com/docker/sbx-releases/releases/tag/v0.38.0 https://github.com/masasron/CopyEscape-CVE-2026-17106 https://github.com/moby/go-archive/releases/tag/v0.3.0 https://github.com/moby/go-archive/security/advisories/GHSA-hfg8-hc9c-6c3h