CyberRota Analysis
AI-GeneratedA path traversal vulnerability in the workspace file endpoint of Docker allows unauthenticated users to exploit the `file_name` form field to access arbitrary files on the host system. This could lead to exposure of sensitive information, including application secrets and database credentials, as attackers can manipulate input to bypass path containment checks. Organizations using Docker should prioritize remediation to protect against potential data breaches and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the `file_name` form field with no path containment check. Attackers can register an account without email verification, then submit crafted `file_name` values such as parent-directory traversal sequences to the `/workspace/file` handler to read host files including application secrets, database credentials, and system files outside the Docker sandbox.