CVE-2026-42306
HighAdvisory
Published 18 May 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.2
- base score, highest
- EPSS
- 0.001
- 1st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 573
- of 17,787 indexed, latest versions
- Container images
- 567
- deployed by those charts
- Fix available
- 1 of 3
- affected packages
Docker: Race condition in docker cp allows bind mount redirection to host path
Carried by container images the latest versions of 573 of 17,787 indexed charts deploy, on 567 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+84 more | no fix listed | 542 |
| github.com/ | v0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible+4 more | no fix listed | 30 |
| docker.iodeb | 20.10.24+dfsg1-1+deb12u1+b6, 26.1.5+dfsg1-9+b13 | 26.1.5+dfsg1-9+deb13u1 | 2 |
- OSV records
- DEBIAN-CVE-2026-42306GHSA-rg2x-37c3-w2rh
- Also known as
- GO-2026-5617
Charts affected
573 by stars
Container images carrying it
567 by charts deploying them
A fixed version is listed for 1 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| gcr.io/ | 30ce73388ae5 | github.com/ | no fix listed | 1 |
| gcr.io/ | 53d9aa4d2c7a | github.com/ | no fix listed | 1 |
| gcr.io/ | 75cfdcfa050a | github.com/ | no fix listed | 1 |
| gcr.io/ | 98a2cc7fd62e | github.com/ | no fix listed | 1 |
| gcr.io/ | b2cd45b8a8a4 | github.com/ | no fix listed | 1 |
| gcr.io/ | 784518ff3ee7 | github.com/ | no fix listed | 1 |
| gcr.io/ | 82940e8c3e0d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 459010a02aff | github.com/ | no fix listed | 1 |
| ghcr.io/ | 81f6007abb4e | github.com/ | no fix listed | 1 |
| ghcr.io/ | 36ce246d884e | github.com/ | no fix listed | 1 |
| ghcr.io/ | 67ffb0309acb | github.com/ | no fix listed | 1 |
| ghcr.io/ | a608b798fda5 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 657a2c9f6e6d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 4c708ecf7dc4 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 5cf1e5709820 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 3490d9900af1 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9ab9a675c405 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 2cef2a3f97da | github.com/ | no fix listed | 1 |
| ghcr.io/ | e2b8aa62b648 | github.com/ | no fix listed | 1 |
| ghcr.io/ | e02a8bd9e2c3 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 3ee1b62aa111 | github.com/ | no fix listed | 1 |
| ghcr.io/ | a058034ca006 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 0d28dbd95b03 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 69b1d3c09cfa | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9608d9b51452 | github.com/ | no fix listed | 1 |
| ghcr.io/ | cf78fdf7403a | github.com/ | no fix listed | 1 |
| ghcr.io/ | fb609bc264d9 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 11cdbbc479b3 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 448cb346b12c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 8a8ec8d4c9ea | github.com/ | no fix listed | 1 |
| ghcr.io/ | e7f9e8f1d565 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 091b906a0b13 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 700bb42ac21d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 8bc853c7414c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9e48285bb44c | github.com/ | no fix listed | 1 |
| ghcr.io/ | bdb31f3121a2 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 40b804fce7f9 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 2ce077d3d02d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 59f75504c5d4 | github.com/ | no fix listed | 1 |
| ghcr.io/ | a6ae5aff81ce | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9853bb613cd0 | github.com/ | no fix listed | 1 |
| ghcr.io/ | c5075f0320cd | github.com/ | no fix listed | 1 |
| ghcr.io/ | 94a749392fcf | github.com/ | no fix listed | 1 |
| ghcr.io/ | ee6a21e66ff0 | github.com/ | no fix listed | 1 |
| ghcr.io/ | c17f1ba17d36 | github.com/ | no fix listed | 1 |
| ghcr.io/ | eeb625bd660c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 03aba499950f | github.com/ | no fix listed | 1 |
| ghcr.io/ | 24bbca4a52a8 | github.com/ | no fix listed | 1 |
| ghcr.io/ | da6b05a1a601 | github.com/ | no fix listed | 1 |
| ghcr.io/ | deed102b4255 | github.com/ | no fix listed | 1 |