Threats Tagged 'cve-2026-42306'

A critical race condition vulnerability (CVE-2026-42306) exists in the Moby container framework used by Red Hat Multicluster Global Hub. The flaw occurs during the docker cp mount setup, allowing a malicious container with control over a running container to redirect a bind mount target to an arbitrary host path. This can lead to arbitrary host file overwrites, potentially causing data corruption or denial of service on the host system. No official fix or mitigation meeting Red Hat's criteria is currently available.

A critical race condition vulnerability exists in the Moby container framework used by Red Hat Multicluster Global Hub. This flaw occurs during the docker cp mount setup, allowing a malicious container with control over a running container to redirect a bind mount target to an arbitrary host path. Exploitation can lead to overwriting host files, potentially causing data corruption or denial of service on the host system. No official fix or patch is currently available that meets Red Hat's criteria for deployment and stability. Mitigation options are limited or unavailable, and users are advised to monitor Red Hat advisories for updates.