CVE-2026-34040

CVSS 3.1: 7.8 high
EPSS: 9%p95
Published: Mar 31, 2026 · Mar 31, 2026
Modified: Jun 17, 2026

Analyze CVE-2026-34040 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.

Vendors: docker

Products: engine

Weakness: CWE-288

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (9.1%)

In the news

1 story

Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access

The Hacker NewsApr 7, 15:15 UTC · Apr 7, 2026VulnerabilityCVE-2026-34040 CVE-2024-411103 · 2 reads