CVE-2026-33997
HighAdvisory
Published 27 Mar 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.1
- base score, highest
- EPSS
- 0.004
- 32nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 573
- of 17,787 indexed, latest versions
- Container images
- 567
- deployed by those charts
- Fix available
- 1 of 3
- affected packages
Moby has an Off-by-one error in its plugin privilege validation
Carried by container images the latest versions of 573 of 17,787 indexed charts deploy, on 567 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| docker.iodeb | 20.10.24+dfsg1-1+deb12u1+b6, 26.1.5+dfsg1-9+b13 | 26.1.5+dfsg1-9+deb13u1 | 2 |
| github.com/ | v0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+84 more | no fix listed | 542 |
| github.com/ | v0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible+4 more | no fix listed | 30 |
- OSV records
- DEBIAN-CVE-2026-33997GHSA-pxq6-2prw-chj9
- Also known as
- GO-2026-4883
Charts affected
573 by stars
Container images carrying it
567 by charts deploying them
A fixed version is listed for 1 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| falcosecurity/ | 7df783d5269a | github.com/ | no fix listed | 1 |
| flashcatcloud/ | 42e6ab16472e | github.com/ | no fix listed | 1 |
| flomesh/ | 22f849c70b25 | github.com/ | no fix listed | 1 |
| fluxcd/ | 92b891e495d8 | github.com/ | no fix listed | 1 |
| fluxcd/ | 31a8c79a6803 | github.com/ | no fix listed | 1 |
| fosrl/ | ccd2b0e9a049 | github.com/ | no fix listed | 1 |
| galaxy/ | e5c265fe9fcd | github.com/ | no fix listed | 1 |
| galaxy/ | e50a890e24c9 | github.com/ | no fix listed | 1 |
| gitea/ | 6120b1165f3a | github.com/ | no fix listed | 1 |
| gitea/ | 7940221bcfc9 | github.com/ | no fix listed | 1 |
| gitea/ | c2a169c5e998 | github.com/ | no fix listed | 1 |
| gitea/ | c57233403eff | github.com/ | no fix listed | 1 |
| gitlab/ | 860d4a3fec7a | github.com/ | no fix listed | 1 |
| gocrane/ | a1400909118c | github.com/ | no fix listed | 1 |
| goharbor/ | 6ab3ca28e9e5 | github.com/ | no fix listed | 1 |
| goharbor/ | 451103a6c8d8 | github.com/ | no fix listed | 1 |
| goharbor/ | 86bf3031f4a7 | github.com/ | no fix listed | 1 |
| goharbor/ | c017dd84ee96 | github.com/ | no fix listed | 1 |
| goharbor/ | 8d5339ff2d74 | github.com/ | no fix listed | 1 |
| goharbor/ | 5c6f7162804c | github.com/ | no fix listed | 1 |
| goharbor/ | b9522c3f5056 | github.com/ | no fix listed | 1 |
| goharbor/ | dc5b882a7db4 | github.com/ | no fix listed | 1 |
| grafana/ | 3364714a2f64 | github.com/ | no fix listed | 1 |
| grafana/ | 825c09373d27 | github.com/ | no fix listed | 1 |
| grafana/ | f6cbec9409be | github.com/ | no fix listed | 1 |
| grafana/ | 01a63f4e032c | github.com/ | no fix listed | 1 |
| grafana/ | 06bdcbb51fc2 | github.com/ | no fix listed | 1 |
| grafana/ | 0f4434c92b3e | github.com/ | no fix listed | 1 |
| grafana/ | 491b0578c049 | github.com/ | no fix listed | 1 |
| grafana/ | 84b76d56c594 | github.com/ | no fix listed | 1 |
| grafana/ | 8c7256f412fe | github.com/ | no fix listed | 1 |
| grafana/ | b8ec653c4423 | github.com/ | no fix listed | 1 |
| grafana/ | c3dac4e26471 | github.com/ | no fix listed | 1 |
| grafana/ | f50931848bd8 | github.com/ | no fix listed | 1 |
| grafana/ | 0f86bada30d6 | github.com/ | no fix listed | 1 |
| grafana/ | 2d1f9ae67c17 | github.com/ | no fix listed | 1 |
| grafana/ | 70d9599b186c | github.com/ | no fix listed | 1 |
| grafana/ | ba93c9d192e5 | github.com/ | no fix listed | 1 |
| grafana/ | 09d8c3ce4f3a | github.com/ | no fix listed | 1 |
| grafana/ | 330f990cdad9 | github.com/ | no fix listed | 1 |
| grafana/ | 072527b12cdf | github.com/ | no fix listed | 1 |
| grafana/ | 5fd12edcc694 | github.com/ | no fix listed | 1 |
| grafana/ | 63a2e57a5b14 | github.com/ | no fix listed | 1 |
| grafana/ | 65bfae480b57 | github.com/ | no fix listed | 1 |
| grafana/ | 8dcfdf466da0 | github.com/ | no fix listed | 1 |
| grafana/ | c16c710f7333 | github.com/ | no fix listed | 1 |
| grafana/ | d3de3da9431c | github.com/ | no fix listed | 1 |
| graviteeio/ | 51dca8076ecc | github.com/ | no fix listed | 1 |
| hashicorp/ | 339b78b61750 | github.com/ | no fix listed | 1 |
| hashicorp/ | 37bf86488b74 | github.com/ | no fix listed | 1 |