Vulnerability intelligence

CVE-2026-34040

Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.

CVSS Score

8.8

High

EPSS — Exploit Probability

8.1%

Riskier than 94% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered Apr 7, 2026 · latest Apr 7, 2026

Coverage timeline

Docker Engine bug lets attackers bypass AuthZ via padded request
thehackernews.com · Apr 7, 2026