CVE-2026-34040
HighAdvisory
Published 27 Mar 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.091
- 95th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 573
- of 17,787 indexed, latest versions
- Container images
- 567
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
Moby has AuthZ plugin bypass when provided oversized request bodies
Carried by container images the latest versions of 573 of 17,787 indexed charts deploy, on 567 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible+4 more | 29.3.1 | 30 |
| docker.iodeb | 20.10.24+dfsg1-1+deb12u1+b6, 26.1.5+dfsg1-9+b13 | 26.1.5+dfsg1-9+deb13u1 | 2 |
| github.com/ | v0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+84 more | no fix listed | 542 |
Charts affected
573 by stars
Container images carrying it
567 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 1d148deae16a | github.com/ | no fix listed | 1 |
| library/ | 2a232a42256f | github.com/ | no fix listed | 1 |
| library/ | 3153fa63f546 | github.com/ | no fix listed | 1 |
| library/ | 3ef33f2e220b | github.com/ | no fix listed | 1 |
| library/ | 851f91d24121 | github.com/ | no fix listed | 1 |
| library/ | aa3df78ecf32 | github.com/ | no fix listed | 1 |
| library/ | afa5d5134900 | github.com/ | no fix listed | 1 |
| library/ | d9a0fd8bdd15 | github.com/ | no fix listed | 1 |
| library/ | dd43b430341a | github.com/ | no fix listed | 1 |
| library/ | e17fa54c2ffd | github.com/ | no fix listed | 1 |
| library/ | 7232f6388a4d | github.com/ | no fix listed | 1 |
| library/ | 28e98eece020 | github.com/ | no fix listed | 1 |
| library/ | 507a3eecf809 | github.com/ | no fix listed | 1 |
| library/ | 794079a7f241 | github.com/ | no fix listed | 1 |
| library/ | addb86c0c520 | github.com/ | no fix listed | 1 |
| library/ | 0a5157f742d2 | github.com/ | no fix listed | 1 |
| library/ | 104204dadedf | github.com/ | no fix listed | 1 |
| library/ | 1489caffaedb | github.com/ | no fix listed | 1 |
| library/ | 1957e3314f43 | github.com/ | no fix listed | 1 |
| library/ | 2f603f8d3abe | github.com/ | no fix listed | 1 |
| library/ | 34d5089d0b41 | github.com/ | no fix listed | 1 |
| library/ | 7d0228d19042 | github.com/ | no fix listed | 1 |
| library/ | eda951fd29a8 | github.com/ | no fix listed | 1 |
| linuxserver/ | 45c5fe102ff3 | github.com/ | no fix listed | 1 |
| logiqai/ | 65b996bc7bdc | github.com/ | no fix listed | 1 |
| lumenvox/ | 9a69862e1248 | github.com/ | no fix listed | 1 |
| lumenvox/ | 35d0b1ac053e | github.com/ | no fix listed | 1 |
| mattermost/ | b440b282599e | github.com/ | no fix listed | 1 |
| mavrick1/ | 45ca0429a1d4 | github.com/ | no fix listed | 1 |
| mesosphere/ | f9b769c65e24 | github.com/ | no fix listed | 1 |
| mesosphere/ | 5efa21defcbc | github.com/ github.com/ | 29.3.1 no fix listed | 1 |
| mesosphere/ | 9f863160127b | github.com/ github.com/ | 29.3.1 no fix listed | 1 |
| mesosphere/ | c10011f866f2 | github.com/ github.com/ | 29.3.1 no fix listed | 1 |
| minio/ | 170b154d2c61 | github.com/ | no fix listed | 1 |
| minio/ | 2adc5be088f5 | github.com/ | no fix listed | 1 |
| mitre/ | 2bc4dfb8150f | github.com/ | no fix listed | 1 |
| moby/ | c2aeafaed434 | github.com/ | no fix listed | 1 |
| moul/ | 332b603727c3 | github.com/ | no fix listed | 1 |
| murtazashah46/ | 4d11726cf803 | github.com/ | no fix listed | 1 |
| netbirdio/ | 0c9994b393ea | github.com/ | no fix listed | 1 |
| netbirdio/ | 3086534361a1 | github.com/ | no fix listed | 1 |
| netbirdio/ | e71f39cefcd9 | github.com/ | no fix listed | 1 |
| ngrok/ | db8e6fecc52c | github.com/ | no fix listed | 1 |
| nousresearch/ | e0df6adebddf | docker.io | 26.1.5+dfsg1-9+deb13u1 | 1 |
| opencord/ | 0d693ba85fd6 | github.com/ | no fix listed | 1 |
| opencsghq/ | 302c9d45d8a8 | github.com/ | no fix listed | 1 |
| openfga/ | 5e94966c11df | github.com/ | no fix listed | 1 |
| oryd/ | ff67c7fb5f95 | github.com/ | no fix listed | 1 |
| oryd/ | bfdb8b9e283a | github.com/ | no fix listed | 1 |
| oryd/ | 2a13bb8d362c | github.com/ | no fix listed | 1 |