CyberRota Analysis
AI-GeneratedA vulnerability exists that allows a malicious builder peer to request and retrieve the contents of files by name from the host system, potentially accessing sensitive data outside the intended build context. This poses a medium risk to environments utilizing the affected container version, particularly those relying on shared build resources. Organizations using this container version should prioritize updating to version 1.2.0 to mitigate the risk of unauthorized data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)