Zabbix Agent 2 Docker plugin has a vulnerability where it does not properly sanitize the 'docker.container_info' parameters before forwarding them to the Docker daemon. This flaw allows an attacker with the ability to invoke Agent 2 to read arbitrary files from running Docker containers by exploiting the Docker archive API. The vulnerability has a medium severity rating with a CVSS score of 4.9.